b\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 992.458014][T21020] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 992.658503][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:29 executing program 1: 14:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:29 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac7014bbac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e0000002000000e0000001000000000000fdbeda98002b0000000000000000"], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x10402, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='oom_score_adj\x00') setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000400)={0x3, 0x0, 0x76, 0xf1, 0xc6}, 0x14) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r6 = accept(r0, &(0x7f00000001c0)=@generic, &(0x7f0000000100)=0x80) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r7, 0x18a, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xec98}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendfile(r3, r5, &(0x7f0000000040), 0x7) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000080)={0x4, 'syz1\x00'}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x200}, 0x4) 14:47:30 executing program 1: [ 992.817423][ C1] net_ratelimit: 19 callbacks suppressed [ 992.817431][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 992.828898][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 992.834688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 992.840483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 992.897407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 992.903440][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:30 executing program 1: 14:47:30 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x104e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6c063b76fb2010d9}, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x88, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @tcp={{0x4e20, 0x4e24, r0, r1, 0x8, 0x0, 0xb, 0xc2, 0xffff, 0x0, 0x9, {[@exp_fastopen={0xfe, 0xe, 0xf989, "fc49643331477d7d93e3"}, @timestamp={0x8, 0xa, 0x3c, 0x8}]}}, {"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"}}}}}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000001180)={0x8, "5a456f1cf749146cb1c305865ed622226f85e2a290c5ac94248c67609e4a04b7", 0x800, 0x7f, 0x8, 0x18, 0x8bbdc5eabf09aad6}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) r5 = dup3(r3, r4, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x7) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000040)) [ 993.031635][T21038] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x100000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:30 executing program 1: 14:47:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0xe000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x1000194ffffffff, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:30 executing program 1: 14:47:30 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f00000000c0)={0x3, 0x0, 0x5017, 0x8, 0x7fff, {0x100, 0x2}, 0x1}) 14:47:30 executing program 1: 14:47:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='\x84\f\x9e\x8c\xa5F\x89\x8d\x00', 0x20802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/\xc9AT\xd4\xd7\xfe\xd0\xfafs ', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000a03300040500fdfff8ff013cc72800000d0200006027010000de6f7202af12cdaf87aecbee94afd127c505c994dafea6a034f8f48d822040eec48b87f5a568bf16cee5f36516bfc9707347c9435c0fe4080075a05e78b8a93300000000010000000000000000000000dc4ccc5b0903739c502129e4"], 0x68) setxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='security.SMACK64\x00', &(0x7f0000000200)='vmnet0(\x00', 0x8, 0x3) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000140)=""/119) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x48000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = dup(r5) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x2}, 0x1c) 14:47:30 executing program 1: 14:47:30 executing program 1: 14:47:30 executing program 1: [ 993.615206][T21071] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x1d1e0300}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 993.697409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 993.703230][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x410f}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x1fa080000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:30 executing program 1: [ 993.777430][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.777458][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:30 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac7014bbac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000086a4ee44c3b67beb00e000000100000000000000007f00002b0000000000000000"], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x101, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'vxcan1\x00', {0x2, 0x4e24, @remote}}) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000000c0)) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) 14:47:31 executing program 1: 14:47:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) syz_emit_ethernet(0x8, &(0x7f0000001380)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32], 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000000c0)={0x0, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x5382, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0xbe6]}) write$P9_RFLUSH(r3, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 14:47:31 executing program 1: 14:47:31 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr], 0x2}, {[@multicast2]}, {[], 0x1}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) 14:47:31 executing program 1: [ 994.127317][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 994.161440][T21114] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:31 executing program 1: 14:47:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x200000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:31 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/95, 0x5f}, {&(0x7f0000000100)=""/94, 0x5e}], 0x2) 14:47:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:31 executing program 1: 14:47:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:31 executing program 1: 14:47:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) setxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x1, 0x80000) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000180)={0x57146cd, 0x27, 0x1}) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004505005c0000019078ac7014bbac1410110502907800000600400000000000000664110000ac1414edf6bee24901c1e3219ceab7aaac1414aa082c00000000000000000000e000000200000000e00000010000000000000000"], 0x0) 14:47:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x300000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:31 executing program 1: 14:47:31 executing program 1: 14:47:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:31 executing program 1: 14:47:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x40000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:31 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) ioctl$TUNSETLINK(r3, 0x400454cd, 0x321) 14:47:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x400000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:32 executing program 1: 14:47:32 executing program 1: 14:47:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x5001}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x50b681, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) r5 = dup3(r3, r4, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x7) write$rfkill(r5, &(0x7f0000000040)={0x2, 0x4, 0x3, 0x1, 0x1}, 0x8) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r7, &(0x7f0000000080), 0x7) syz_emit_ethernet(0x0, &(0x7f0000000140)=ANY=[], 0x0) 14:47:32 executing program 1: 14:47:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xff\xff', 0x22000000c0ffffff}) 14:47:32 executing program 1: 14:47:32 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYPTR]]], 0x0) 14:47:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x500000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x5302}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x7d14899e45e415cd, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r4, &(0x7f0000000080), 0x1b) listen(r4, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)={r5, 0x6, 0x84, "d35b285a6a03d823e17a1530d436e09d03f5277f6146eed672de0ca6c153aa41d2265af9082fb5112acd1cae869b9d4057670f93f47c5a583990e9ce48d9363aa39b7bde1dd947f1ff77f5438eb174a32ac27dbbe6c25fb4c771e4db007eb675304a33d27d38eee349ff663ebd4ea7ceba8906f34c4d2551ca6b49ba933f2ec78f9bb701"}, 0x8c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x82) r8 = dup3(r6, r7, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r8, r9, &(0x7f0000000040), 0x7) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='-cpuset\x00', &(0x7f0000000040)='./file0\x00', r9) 14:47:32 executing program 1: 14:47:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x600000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:32 executing program 1: 14:47:32 executing program 1: [ 995.948525][T21242] validate_nla: 5 callbacks suppressed [ 995.948535][T21242] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xff\xff', 0x22000000c0ffffff}) 14:47:33 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x30002, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1}}, 0x0, 0x100, 0x0, "067aac9466ac12300b35b313e666d312e6de66a3239e446884ac09ccb0a1256e1117bf16de860d62de910cf2d54ee2ec82c7e692dacf46a34e16188fb29ae1c462f07e9d00cf36f84c9e952beb050d8b"}, 0xd8) syz_emit_ethernet(0xaa, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @random="9a31707a2e6a", [{[{0x9100, 0x5, 0x4, 0x2}], {0x8100, 0x6, 0x8, 0x1}}], {@canfd={0xd, {{0x1, 0x3ff, 0xfffffffffffff001, 0x7f}, 0x19, 0x4, 0x0, 0x0, "31fb85d58704e2cf36daaf44b15443c250a2691476d53c457035e001b04f217120158cadca682f27c70f1ddfa8cc9f2d40343514450bdcd2184d27a5b84a52ae"}}}}, &(0x7f0000000300)={0x1, 0x3, [0xbd2, 0x1e7, 0xeb6, 0xb3a]}) 14:47:33 executing program 1: 14:47:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x700000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0xe00000000000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 996.073626][T21262] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:33 executing program 1: 14:47:33 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac7014bbac1414110502b07800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e002000200000000e000000100000000000000007f00002b0000000000000000587efc5345147d05ac8a2dc7dc9e975d7ab336869d0b06871ebd9148654c56cfb2c948a6594b098568de45631e5ec558b87a82bbf4bbf8ea45208c122f4140a5cedfdaa5aa71a87afb01c456755269c8fd474b085f8fb76a26fb32d0e6a3e831f58aa65936a943ab5d2b91909cf77154deb5ef5587749b020e995de480c74c5a53cb7cf88e561c3f98b86ddc79bd6dd6d9cbbc7d25b0c06488944346c26b"], 0x0) 14:47:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x800000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:33 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpgrp(r0) ptrace$setregs(0xd, r1, 0xf54, &(0x7f0000000080)) 14:47:33 executing program 1: 14:47:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xff\xff', 0x22000000c0ffffff}) 14:47:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xa00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 996.308676][T21287] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x1d1e030000000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:33 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001b40)={0x0, 0x7c, &(0x7f0000000840)=[{&(0x7f0000000100)="d800000018008106e00f80ecdb4cb906021d65ef0b007c05e8fe32a1bc00040000027e0103000000050000000000812fa8000b000f0063e3e558f030035c3b61c1d67f7f9400717cc7d6fe846d29491ce459adfff5ffda34cf6efb8000a007a290457f0189b316275ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9acbee5de6ccd40d", 0xd8}], 0x1}, 0x0) 14:47:33 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x138c, &(0x7f0000000080)={@dev={[], 0x24}, @local, [{[{0x9100, 0x5, 0x5, 0x4}], {0x8100, 0x2, 0xfff, 0x1}}], {@ipv6={0x86dd, {0x5, 0x6, "a645ee", 0x134e, 0x84, 0x100000000, @dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@fragment={0x0, 0x0, 0x9, 0x4, 0x0, 0x3, 0x65}, @routing={0x5c, 0xa, 0x4a2240de8419f865, 0x6, 0x0, [@dev={0xfe, 0x80, [], 0xa}, @loopback, @mcast1, @dev={0xfe, 0x80, [], 0xc}, @dev={0xfe, 0x80, [], 0xe}]}, @srh={0x8f7f9f9b8bf17526, 0x4, 0x4, 0x2, 0x7, 0x10, 0x7, [@mcast1, @mcast1]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x81, 0x80, 0x0, [@empty, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr="cfccdac182b8a9fd94eba5ffbe3756d7"]}, @routing={0x2e, 0x2, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, @srh={0x3c, 0xc, 0x4, 0x6, 0x80, 0x0, 0x8, [@dev={0xfe, 0x80, [], 0xf}, @remote, @rand_addr="160dedd9b5b6957b91e68cad107c74cd", @rand_addr="7c7e21a87047a4af300155990851fb85", @ipv4={[], [], @remote}, @ipv4={[], [], @broadcast}]}, @dstopts={0x38, 0x1, [], [@jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x2c, 0x223, [], [@generic={0x4f, 0xe4, "867198abf8253d543b0f32b8585e86357fc0f2e0043bf1b0ec775c9cc8df94ad8379ede7343e2b32edaa5129f2e565fb334c790aec6e35c2330f759b5267dc94e1af4b02be5c8167d54232d5ad01418ed7de97f98509b722472e36d274165542caa7f290424a1f69b5b9516a6c1100ae569a09b64962dfc5e263625d0e046720507c16dec1bb2b3e342a18b2e31a40518adfeef31ba3ce5f58fe5b6e92bf7e6942b152065f2b4cabfd5b5ffe483b7cdf6290bcbfea679676ce68041a4adae7a6849eaff70b61b95eda01d98d319a33a24d904ed1643440706808809d37532bdb9b2825a8"}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8001, 0x1000, "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"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @dccp={{0x4e21, 0x4e20, 0x4, 0x1, 0x7fffffff, 0x0, 0x0, 0x2, 0x81, "9680dc", 0x8001, "f740b4"}, "3592e79728a2eafaf186feb79c299ac612f9f718b5aceeafb1d32ee95a41e28c0339e643a38c92c4d5dd2257d8ccd8f1bf3dc23a867ce5443ea321f253e39a9b549d91d7deba3d199433faa5a73c90b34e64ff36aa29a23f1406c321e85c60486aa0a85f96101bdc8511aa6e44720bd2f4943212fad227f5a98946156b0907f773534e99c3ed14fcbc9798383b8a72717dcfed0d6eb5112cc90f8ad07a9ec9e37084a06fa77da37c97277ada78f22a23ab50abe4753fea9ede51b2ffb532"}}}}}}, &(0x7f0000001440)={0x1, 0x4, [0x461, 0x911, 0x39e, 0x905]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001480)="2c62c00efc61b6b43acc8f51c27b76227da43413ebcf38e00a5cd74f7746f0ee75892b85c197fdd719ef18c54d5fba62010c0be5829b81dbca2c5f3eb45203fe26ddd145e2318006cb01d8696136ec472e728a76ffba676509ca414256d2f743e6a57a3b8aecbac58611f6126ee7ae938a135fd40c3caad0fd88c1ae5384d773580dbf565d3306214dfcd1a9f88f4fe4a00e4cab", 0x94) symlink(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x82) r6 = dup3(r4, r5, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r6, r7, &(0x7f0000000040), 0x7) renameat2(r3, &(0x7f00000015c0)='./file0\x00', r6, &(0x7f0000001600)='./file1\x00', 0x1) 14:47:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xe00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 996.498233][T21305] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:47:33 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/72, 0x48}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/11, 0xb}], 0x7}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000b00)=""/35, 0x23}, {&(0x7f0000000b40)=""/205, 0xcd}, {&(0x7f0000000c40)=""/254, 0xfe}], 0x3, &(0x7f0000001080)=""/197, 0xc5}, 0x100}], 0x2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 14:47:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x1000000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xff\xff', 0x22000000c0ffffff}) 14:47:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x3f00000000000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:33 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x114100, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x1ff) syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) [ 996.749061][T21332] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x2c00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x0, 0x2, 0x700) 14:47:34 executing program 4: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)="555df9fbb63092b079f7aafaf557486a1454eedf87d9fde3edb50b30c2cc8ea7265105494d3cb5acc58f35b22dc9ee90f3be590353163351232eae345f14ed736947f812f0595683dd277dc501834f7d1c906ea6dfbd7d1486c49d4003079bab1555ba1cfee6285a0fdaf3d746d21a19af15d23735dae8f91f180a779aa957a15d95d67383e03f7143d853eba06e049d05720cf525962bbcec30239f8c989e9553a9dab3eb7a2fc2a1d9f10914d79f738eca13daf82592ec634de25a41375f74eff0c4", 0xc3) syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaaaab6aa000000ff000008004500005c0000000000019078ac7014bbac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e000000200000000e000000100000000000000007f00002b0000000000000000"], 0x0) 14:47:34 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac7014d1ac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e000000200000000e000000100000000000000ee7e00002b0000000000000000"], 0x0) mlockall(0x0) 14:47:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:47:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x3300000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:34 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="0daaaaaaaaaa00000003000000004500005c0000000000019078ac7014bbac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c00000000ff7f000000000300000200000000faff00007f0000762e4725960800000000000000000000005c6810381b43e87b35ea8c96"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) [ 997.040899][T21359] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 14:47:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x4000000000000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 997.106073][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:34 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='f', 0x1, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 14:47:34 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newqdisc={0x45c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x430, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}, @TCA_CBQ_RTAB={0x404}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x3}}]}}]}, 0x45c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@ipv4={[], [], @loopback}, 0x4e21, 0x0, 0x4e21, 0x6, 0x0, 0xa0, 0x20, 0x6, r4, r6}, {0x8, 0x7, 0x10001, 0xffffffff80000001, 0x8001, 0x6, 0x2, 0x7}, {0x100000000, 0x14fa, 0xfffffffffffffffb, 0x100000000}, 0x9, 0x0, 0x2, 0x1, 0x68bbe4bfe9de4e07, 0x2}, {{@in6=@remote, 0x4d5, 0x2b}, 0x2, @in=@multicast2, 0x3506, 0x4, 0x1, 0x9, 0x8, 0xe4f2, 0x1}}, 0xe8) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0x31, 0xf0f5fae2218385aa, 0xfffffffffffffffb, "932d3d39ee7e8c6b8793c74eb84f50ee", "d06d0faa29e66e77bc33ab583042b83064c3ddac5077a78265d2965a"}, 0x31, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r7, 0x0, 0x0) ioctl$FICLONE(r7, 0x40049409, r2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x14, 0x0, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x1b, &(0x7f00000002c0)=""/122, &(0x7f0000000340)=0x7a) 14:47:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100001050000000000000000000000004e3f75020ebf046eedf9a5969069643936f624f0d848042737a667864247fc24275b2dea3e5e1c51badbe01de1cdc30745ee8ff1065a21fba18efee44cac4556d203176800da46311f837a2abfb11e3efed57eda04008c04ccaf6a785b8ce61289efc354fb79526b69aa454ba41d505dbd51430d5807c7c0b7dd80601e0b345e04149d68e9ba9b37716cb007081370d850c9971eec98afd3d1d99c183fcf0c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100697036746e6c00000c00020008000f0001000000"], 0x3c}}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x8, 0x4) 14:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x3f00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 997.368918][T21369] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 997.401106][T21390] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 14:47:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xfd\xfd', 0x22000000c0ffffff}) 14:47:34 executing program 1: syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000340)={0x0, "50891555343d50cf85ec677b4d3c6da1068231e50320117b79c723400155ec84"}) 14:47:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0xffffffff00000000}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 997.494533][T21396] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2dc5, 0x4b9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) read$char_usb(r0, &(0x7f0000000180)=""/136, 0x88) connect$inet6(r2, &(0x7f0000000140), 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r3 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) dup3(r3, r1, 0x80000) 14:47:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x8}, 0xa6) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r2, &(0x7f0000000080), 0x1b) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @empty}}, [0x8001, 0x54, 0x8, 0x0, 0xb80, 0x26a, 0x8, 0x80000000, 0x5, 0x7b0, 0x4, 0x80000001, 0xffffffffffff7fff, 0x9, 0x40]}, &(0x7f0000000040)=0x100) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x101202, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000002c0)={0x9, 0x6, 0x5, 'queue0\x00', 0x20}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x21, &(0x7f0000000080), 0x4) [ 997.759841][T21416] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x4000000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 997.857406][ C0] net_ratelimit: 19 callbacks suppressed [ 997.857414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 997.868889][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 997.937414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 997.937441][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 997.943219][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:35 executing program 4: syz_emit_ethernet(0xaa, &(0x7f00000000c0)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c00000081f408695df3d421bbac14141105029078000006004000000000f4ad0300000000000000d1848d009800000064110000ac1414aaac1414aa082c00007700000000000000e000000100000000000000007f00002b000000000000000080fef8a4f795c6d60deb93958b0e0f9a7a5296f1ed6ff9ef61b344ec81978dc612a9a1cf613dab73dc21f78b88f524d2ad"], 0x0) 14:47:35 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xe7, 0x440080) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000100)=0x420a, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x4703000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:35 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xd]}, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {}, {}]}]}}}}}}}, 0x0) [ 998.123310][T21442] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x4800000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r4 = dup3(r2, r3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f00000005c0)) write$uinput_user_dev(r1, &(0x7f0000000140)={'\x02yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\n\x00\x00\xfe\xff\xff\xff\xfe\xff\xff\xff\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff]}, 0x45c) 14:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8087}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xf5\xff', 0x22000000c0ffffff}) 14:47:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:35 executing program 4: syz_emit_ethernet(0x86, &(0x7f0000000080)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0xc, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @loopback, {[@rr={0x7, 0x7, 0x3, [@multicast1]}, @generic={0x89, 0x12, "fd45de092d74f14dc14fda555715e16f"}]}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0xa658, [{[@rand_addr]}, {[@empty]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0xe32faf71bb1338ef}, @val={0x6, 0x2, 0x9, 0x80000000, 0x9, 0x3}, @ipv6={0x76, 0x6, "03124c", 0x33a, 0x0, 0x5, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, {[@dstopts={0x5c, 0x6, [], [@calipso={0x7, 0x18, {0x4, 0x4, 0xba, 0x5, [0x1, 0x37]}}, @jumbo={0xc2, 0x4, 0x100}, @pad1, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x7ff}]}, @srh={0x3a, 0x2, 0x4, 0x1, 0x6, 0x10, 0x4, [@dev={0xfe, 0x80, [], 0xf}]}, @srh={0x2c, 0x4, 0x4, 0x2, 0x6, 0x58, 0x800, [@loopback, @mcast2]}, @srh={0x0, 0xc, 0x4, 0x6, 0x3, 0x0, 0x2, [@dev={0xfe, 0x80, [], 0xc}, @loopback, @empty, @ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1]}, @hopopts={0xc, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3a, 0x0, 0x2, 0x9, 0x0, 0x7fff, 0x68}, @hopopts={0xb, 0x10, [], [@generic={0x8, 0x5d, "5daded36640408683cfb1bd4298ddf5fbe4b9def11b9d9ffdff57fe7bccf680e573bc6681a061e7e361031a798330cc2e83fdcc4ed8d9eca31d507612d1a713e67f2ac89ff76021e00ccd5f3213c9aeea120e3c53943df1bb192ed2c59"}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1000}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x17}]}, @fragment={0x23, 0x0, 0x3, 0x2, 0x0, 0x5, 0x66}], @icmpv6=@dest_unreach={0x1, 0x4, 0x0, 0x6, [], {0x2, 0x6, "8872c3", 0xd216, 0x4, 0xb77e, @remote, @remote, [@dstopts={0x21, 0x1a, [], [@calipso={0x7, 0x10, {0x4, 0x2, 0x3, 0xff, [0x6]}}, @calipso={0x7, 0x40, {0x2ee3, 0xe, 0x6, 0x5, [0x2fce, 0x7, 0x200, 0x100000001, 0x3, 0xe9, 0x8]}}, @generic={0x6, 0x6f, "53b6968c4c7cc6bb1799e57d60036792f966c612c5b03a2d063b354f44d2aeb3c235c08c506107f73d5219321eeca1c8157450b3dcbd3d7a90f6edb701c741e766bbfbd49944d93a64ea496cdf50f01688ddb9b3ad6c98707c54ea1f76b56595d6bd658bae03f43799e1d2b768517a"}, @ra={0x5, 0x2, 0xec7}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0xff}]}], "493a7e0354ce04fd0a8b93b2a224cf16a857d89f6f1715197036f9560107807443d3c15266fdb232b27c31e2d6396a1136a1e3df2b0e84290705474bc6c21c6d8aa30b5d31a77d667b8ac2b810d545d45606376289c184907706aac6b85ddb724b42350e709bb2a9bdac3fc81b3f966916b029ca05826fb95c4e9de2ff0c9c6b300391318b6894461d7173ea60a841dc584a"}}}}}, 0x370) [ 998.299540][T21460] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x4c00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:35 executing program 4: semget(0x2, 0x1, 0x309) syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) 14:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000040)={0x4008, 0x0, 0x8001, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000000)=0x400) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x9, 0xa61, &(0x7f0000000200)="eeb5789768f953d58860c90094cb7f387f7778dcc229c6559336f61b7586386eb19a486938f67db4dad744de150caf4573c85210dcab743b11f10fbcaf5449794dc32ca7dfe8e74685cefe5f6e63baa0db6d44b8d24c474ee57aaa3358743b72c7bef2426643fecca2a44ea59fd801fdb2d07a2910b57aabac0ff5fc1f9c003eb4e086d156e221e4957ddc08bb59e64ac28de50da9988a092f1973e25e04a7776c5f57efd4918efd75179e8fa074897f2ab7286afbb2713213e9575d92533cf7613aa692b3fbf5f6b44f42a911fb830781dd455a556a9e2e2b93aea388ca9c2573266a1769e38c89575c6782d87c42e6", &(0x7f0000000300)="5fa7e03fee11a201c837db3c6a46283a52f373e28966d28e381717c9a0d08b17a19a73c99ba773b82d087c33687a90aaf2c48b0dfc6d0903017ce563853fcad587c11abfef8c7321b1031d010ed11212545ae45d10611e5dc9ea8e7fdbc1a31eb616cd15c48fbd40aede0909ae19b432d08732eac7d70cb00251d80c670e49840e7072239b04ba34654b942ab48c2b6ab54f522e74c03ba5ef9b156a9129b214ac2b4b57d0fe645b56d3cf6d642c2ae9c16e41068ddc41ac36ad5514e9985bc4d8f6a1492ca62034db1fc6a8670e4b2cd3cff66af7968908f028750f9380c33e6e59", 0xf0, 0xe2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:47:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x6800000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xfe\xff', 0x22000000c0ffffff}) 14:47:35 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000080)) 14:47:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x6c00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8400}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\xea\xeb', 0x22000000c0ffffff}) 14:47:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x7400000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:36 executing program 4: syz_emit_ethernet(0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff0000910030008100010008004500005c0000000000019078ac7014bbac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c0000000000000000000000e000000100000000000000007f00002b0000000000000000"], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x6) 14:47:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8a02}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 999.057443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.063436][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.069297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 999.075061][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 999.137416][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:47:36 executing program 1: unshare(0x2000400) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$P9_RWALK(r0, &(0x7f0000000080)={0x3d, 0x6f, 0x1, {0x4, [{0x46, 0x0, 0x1}, {0x13, 0x2, 0x8}, {0x80, 0x1, 0x6}, {0x4, 0x3, 0x6}]}}, 0x3d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="ef42a50d5e0bb0e67bf070") r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000100)="07ed9f2eae7f09ac012b34c3dc2e2c337f45204173c20aa3f5c047fc568c1bd039831f1d612248dbf6de118574da2ef0816b3756a816c62417cbadd9ba39d78ec97f228e63ca7e93d60a9842") ftruncate(r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20000, 0x0) 14:47:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x7a00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:36 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000017800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e000000200000000e000000100000000000000007f00002b00"/106], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) 14:47:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 999.189553][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xaa03}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:36 executing program 1: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x100000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/99, 0x11d) getdents(r0, &(0x7f0000000180)=""/130, 0xffffffffffffffbd) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 14:47:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x9675090000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xb201}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:36 executing program 4: syz_emit_ethernet(0xaa, &(0x7f00000000c0)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac7014bbac1414110502907800000600400000000000000064110000ac0700aaac1414aa082c00000000000000000000e000000200000000e000000101000000000000007f00002b0000000000000000cc2ecd457404fa4ad47fcdb74d17e597657028446add6dd5e2d0693a8d72ee679d2168ac791e6e1f96965c09eaceb41913c1ea124f0743faa02cf841464e87454428b8a9"], 0x0) 14:47:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 999.580313][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:36 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000780)) semget(0x0, 0x0, 0x20) syz_emit_ethernet(0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3, 0x0, 0x10000000, 0x1, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f00000000c0)={0x8, 0x1000, 0x81, 0xffff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x43, 0x1, 0x7, {0x0, 0x1c9c380}, 0x3, 0x6}) socket$isdn_base(0x22, 0x3, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in6=@empty}}, {{@in=@multicast2}}}, &(0x7f00000003c0)=0xe8) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000007c0)) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x22, 0xffffffffffffffff, 0x4000000000, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0xfffffffffffffffe, 0xffffffffffffff8d) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000400)={0x0, 0x7530}, 0x4a4) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_open_dev$mouse(&(0x7f0000000940)='/dev/input/mouse#\x00', 0xff, 0x101) openat$ion(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ion\x00', 0x229559d52ade8c28, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r2, 0x0) msgget$private(0x0, 0x417) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x400500, 0x0) setreuid(0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2700}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4eb}}], [{@subj_user={'subj_user', 0x3d, 'sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}}, {{@in=@local}}}, &(0x7f0000000240)=0x417a) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2700}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4eb}}], [{@subj_user={'subj_user', 0x3d, 'sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xaa03000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xb202}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:37 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0daaaaaaaaaaaaaaaaaaaa1208004500fec60000000000019078ac7014bbac14141105029078c7dbe6bcb1891ea650c400000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e000000200000000e000000100000000000000007f00002b0000000000000000bec260e76d6f85836f10ea722df2c80a5c28746a58a10a58dadf88deb3fe867b5340cf192e5b413e55e44b63ac890378ac8e082a95ab50854d1f9db676c197696b481899040f23bedf1cec0d07cc46810239587d8b01434ca45470075b393803e522d733f738"], 0x0) 14:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xb603}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xe4ffffff00000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:37 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x114, &(0x7f0000000180)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0xe, 0x4, 0x0, 0x0, 0x106, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x100000000000022}, {[@timestamp={0x44, 0x20, 0x5, 0x1, 0x1ff, [{[], 0x1616}, {[], 0x1}, {[@dev={0xac, 0x14, 0x14, 0x2b}]}, {[@loopback], 0xcfe}, {[], 0xfffffffffffeffff}]}, @noop, @noop]}}, @tcp={{0x4e21, 0x4e22, r0, r1, 0x7, 0x0, 0x9, 0x8, 0xffff, 0x0, 0x8, {[@fastopen={0x22, 0xe, "01fd0731d53e37f918437ef0"}]}}, {"376c809e4d33430e95cf1703b76531144a79bc5b2c1760a5cd623bb15d9fa20299a0c4ea3759f9d82266ec1d4f481d4703c60efcd994054fe511d67f87c12061ab88e782939b9c006e08024a3e2e382e4f3c4a947272b36858479f8fb6cb3002548e6f5970e3b5322249318ce87a7624edf62570288983172feb389a04bcfe79378a838fc8be00261053523eb1982c66f11b4ac2cd30c43e332fe28f6c7fec70b7aa8e11553969fa98f1"}}}}}}, 0x0) 14:47:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:37 executing program 4: syz_emit_ethernet(0xe6, &(0x7f0000000100)={@dev={[], 0x15}, @random="1f8f785cae92", [], {@llc={0x4, {@llc={0xbc, 0xd4, '\r', "7b4b2568834d494792eba6170288557bd479c85478cc7e836294149701ec3dfa7acef2a1f068a22561b3e63ffa45676dd6cf40e1e3625e5f1cea6300db77a0e66bb3c53ff20ef0f48bba8b3c3cbc3b1de4f892813616798e9ba7253e56a2b2e7ff13e612be53b112f51c064e41bb76d703059556bed3395555ab57d2c39b66955cfdbe2f2ed9801ee0a313aa81214fb8a945db09fbaa38d5b957bac09628c958e8db5f1cb087978e52613172cad3dcf9173f9fdf0d2fb53c47cee8841f544d4eb78c94af01da27ee859b394db811850eb9a63974b9"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0xdde, 0xb1a, 0xbfe, 0xead]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) accept$unix(r3, &(0x7f0000000200), &(0x7f0000000040)=0x6e) syz_emit_ethernet(0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac70140c0dbbac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e000000200000000e000000100000000000000007f00002b0000000000000000"], 0x0) 14:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xbc03}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xff00000000000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:37 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r4 = dup3(r2, r3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) write$FUSE_STATFS(r4, &(0x7f0000000000)={0x60, 0x0, 0x6, {{0x3, 0x6, 0x3, 0x8, 0xfffffffeffffffff, 0x7, 0x9}}}, 0x60) fcntl$setpipe(r1, 0x407, 0x80005) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x82) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) write$binfmt_aout(r9, &(0x7f0000000380)={{0x108, 0x9, 0x1, 0xc3, 0xb2, 0x0, 0x1e4, 0x5cb}, "981a1c89750b0db71ea1bd624ba7c722710bb43bcb740205e87bb2e8f2587fe932167a13ba5fa49eb65430486ffe2941204afb80c3e48ef8359e294f8bc17d0811a41545762cd443b0fe2be4780632b5a623f3e8c43e22fb0567418c6ed241d24c3c4da433b9b7723c05864a4f3ee5fd60a9733ee70baf36e61863a1c6a6bdd1983f315d5b2c6a718a47b2c493efe6bf63a95a30d801e49f222fcb33f704841ac349d49d59c0ad7a37927214b8e1087f3d0030410d214d0c990bff2fda8eda043a3b2c5ad6c8bc0cfe55e82d004f9a48934b8d727becdd799105935efba248f5", [[], [], [], [], [], [], [], [], [], []]}, 0xb00) r10 = dup3(r6, r7, 0x0) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r10, r11, &(0x7f0000000040), 0x7) ioctl$VIDIOC_S_AUDOUT(r11, 0x40345632, &(0x7f0000000080)={0x600000000, "e165d4f499863cdc0caf55f22de86c9133efb4d281276911f2296319de1a63ff", 0x3}) splice(r0, 0x0, r1, 0x0, 0x80080003, 0x0) 14:47:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xbe03}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x30000000000000, 0x5}, 'port1\x00', 0x88, 0x82, 0xb0, 0x4, 0x25e5, 0x5, 0x5, 0x0, 0x2, 0x3}) syz_emit_ethernet(0xaa, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 14:47:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xffdffe5f00000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1000.997193][T21658] validate_nla: 8 callbacks suppressed [ 1000.997202][T21658] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:38 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) 14:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000000180)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r3, &(0x7f0000000080), 0x1b) listen(r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r6, 0xffffffffffffff81, 0x10}, &(0x7f0000000080)=0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0xd, &(0x7f0000000000)={0x0, 0x0, 0x1bc}, 0x8) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r8 = dup2(r0, r2) dup3(r8, r1, 0x0) 14:47:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:38 executing program 4: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r0, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) 14:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xdc02}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xe003}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xffffffff00000000, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1001.340487][T21684] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:38 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{}, {}, {}], {}, [{}, {}, {}, {}, {}, {}]}, 0xfe2c, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0xfd}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="e7b826ef0de63aff50d96bfd7b22e55aa0ef4c4cc19c72fb945d103df4093230bf5f7ab8f2289f255b245587902e0804e5316f6dd3bc64b2aa7dce64a783a4c9b35539ef4f2c7d2d078e71fe286fe8a4ca47c64b127b18dd8bb8d1eccf2dc150fa2327ca71588aee2cfbf1e1dad16abe0c2c5719ce", 0x75}, {&(0x7f00000013c0)="f8c1bee75645e3c1e43f83f600102958d4005d307af921a8a9eb1ae4a514cc0b9bf81a547ee9ef045bd075fc8e24a24206b5847a151fed1b307904513ebf4e03c4db253d45784961c4d7aef0c4f96ebd444dd28e7a4092248b2b255b4a01b73fd421c1f4216fcc0d1d5032de878bee9ecd3fbb5e76beb765145fbadf0262b9d4bfdf04b39891a6cf9f45a9605a4705d7ec6b2b4df167418f9180d047032ddce1baea593054ae9be558f969812b2e5b8e3f30035e4d7d827f5882a8e87e7e5b7c7f", 0xc1}], 0x4, 0x0, 0x0, 0x10}, 0x0) [ 1001.444530][T21696] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0xffffffff94010001, 0x0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xe803}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigsuspend(&(0x7f0000000000)={0x3f}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sysfs$2(0x2, 0x1, &(0x7f0000000080)=""/92) 14:47:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x2, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1001.769739][T21713] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='\x1fdev\x87Dv\a\x00', 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) writev(r2, &(0x7f0000000140), 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac7014bbac1414110502907800000600400000000000000064110000ac1414aaac1414aa082c00000000000000000000e000000200000000e000000100000000000000007f00002b6bc90b011eee2f036c065594770000000000000000"], 0x0) 14:47:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xec03}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:39 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="0daaaaaaaaaa000000ff000008004500005c0000000000019078ac7014bbac1414110502907800000604400000000000000064110000ac1414aaac1414aa082c00000000000000000000e000000200000000e000000100000000000000007f00002b0000000000000000"], 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x388e, 0x3) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x100) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5, r6, r7], 0x3) [ 1002.178168][T21739] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1002.227144][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 1002.454867][T21756] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:39 executing program 1: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x310) pipe(0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffffff}}}}, 0xa0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x2008001) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 14:47:39 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xd]}, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x40000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x8, 0x28, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {}, {}, {[@loopback=0x7f00002b]}, {}]}]}}}}}}}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='%:\x00', &(0x7f0000000200)='em0trusted\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='security\n(nodevcgroupppp1vmnet0cgroupsecurityvmnet0\'*vboxnet0/\xbbnodevmd5sum\xd1GPLlo!eth1\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='y\x00', &(0x7f0000000440)='%\x00', &(0x7f0000000480)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='\x00']) 14:47:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xf001}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x5, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x3c) r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)) mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x190) keyctl$describe(0x6, 0x0, &(0x7f0000000300)=""/187, 0xbb) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000400)) getcwd(&(0x7f0000000580)=""/237, 0xed) getsockname$packet(r0, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) accept$packet(r0, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000b00)={@dev}, &(0x7f0000000700)=0xfffffe59) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000001080)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x4, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x808100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@random={'system.', '\x00'}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 14:47:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:39 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x16800) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000180)=0x6) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x8, 0x430240) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'bridge_slave_1\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x22400, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000300)=0x3) r8 = fcntl$dupfd(r0, 0x1cac5e3028d7b4c0, r0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, &(0x7f0000000340)={0x40000000, 0x100, "24dd52fca51ffb538bd4f867579d7a3cb59ee42d6e40503bd0db1e5f415f94d0", 0x5, 0x9, 0x800, 0x9, 0x4, 0x1, 0x5, 0x7, [0x5, 0x100, 0xfffffffffffffffd, 0xfffffffeffffffff]}) r9 = request_key(&(0x7f0000000440)='.dead\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r9, 0x4) prctl$PR_SVE_GET_VL(0x33, 0xb3bb) r10 = accept$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @multicast1}, &(0x7f0000000540)=0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f00000005c0)=0x10) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000600)=""/129, 0x1}) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) r12 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x100, 0x18000) write$nbd(r12, &(0x7f0000000780)={0x67446698, 0x1, 0x2, 0x3, 0x3, "0ed39de14cc51e6eec91c195f94f654548685bd2f77757d5b174d36f7548b47854191cf17952654ba1ae6aeb787f5ee8bbf323a7572fa4485f30344c7b482cd9c7f7d43e9b4f572d6474c6df56"}, 0x5d) r13 = openat$audio(0xffffffffffffff9c, &(0x7f0000000800)='/dev/audio\x00', 0x2000, 0x0) dup3(r13, r2, 0x80000) timerfd_create(0x2, 0x80000) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vsock\x00', 0x80, 0x0) fcntl$F_SET_RW_HINT(r14, 0x40c, &(0x7f0000000880)=0x1) [ 1002.797690][T21779] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:40 executing program 1: socket$kcm(0x10, 0x2, 0x10) 14:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xf403}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:40 executing program 4: openat$sequencer(0xffffffffffffff9c, 0x0, 0x646401, 0x0) syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60b409000030000400000000000000000000ffffe0000002ff020000000000000000000000002092c48390780009040060b680fa000000000000000005006cc80000ffff7f98ffff0000000000bbb7537e57119b634a51194f63cc45bb2cf4dd675d6a5d91ca3cc1376e1cb73aa9cdf789c82360fd84c68eb9e4d9466252b5ddf3f1293a07bd40e79ab07c29104c3983d1166db62339f656df316f1464fc00985de6aef72a0fe65105c5b5c2bfca2f3dd7e3f1f65cc5f385e7bb681237f307a61d49540e072dbdddb031ad998723a2ef0ee6eebae911a375b671102ffc56755aa17f"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x7eed82cd8942042, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x262f02, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r8, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r9, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYPTR, @ANYBLOB="a35a613fd929e5f2ac97afb0c7c001cede2fe58b9f24ed50d7a3a8672ea1ce6d605836640baa38dfde87e0834bf13dd2da0dc3e91678847191b6c6ab3eb413ac87aa9742896555ad5034ca97b28fb7a7f8d12bed09b2604cdc23b4e8a79449e961015450aabc01df1a0ceab481942b62e048c92ad36a35e91d2fac57db00652481122c051f8db39114b86cf34c38574c5381d242716dec399413c58123f13603372e1d8aa5bd6c90a560e7f760453115b4f3", @ANYRES32=r0, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYPTR64, @ANYPTR, @ANYBLOB="5b0edee19d6ec1a92937a8f09bda5619fa6a7177adfb40754f96691b6560e7c7ad77ab411c6de5bdd99d41a895614232f80c073f29ea188681818327ce2c2cc7a597d26fd035da2cd02af81e1ae836ac4d2e950156c94e56507d0e59db34be817c38512824083dc19954b43d756c4ead1d55d2f73bfa75d8d646c8945999a5d2841bbec7ed57e006ff7a2392cd2f9d00fcfd8d2b14bf98c8b329806d82da4f5001cf3669e39499576be0c26f8b1e28fd50ac7d0f31c8be70ff3fb7fb6c5df30a6f129746ad8d1c40c6b1f395df0bef6251989c8fb9", @ANYRESDEC=r5, @ANYRES16], @ANYRESDEC=r8, @ANYRES64=r9]], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4000002) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self\x00', 0x0, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x100000, 0x0, 0x10, r11, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000340)={0x0, r11, 0xffffffffffff0000, 0x401, 0x5, 0x90b4}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) r14 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x7}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000000480)={r15, 0x2, 0x80000001, 0x4}, 0x10) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r17 = ioctl$KVM_CREATE_VM(r16, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r17, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x10000, 0x2000, &(0x7f0000127000/0x2000)=nil}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=""/125, 0x7d) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x1, 0x0, 0x0, 0x2000000000002) 14:47:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) [ 1003.039272][T21814] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xf603}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1003.217428][ C1] net_ratelimit: 18 callbacks suppressed [ 1003.217436][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.228937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.234769][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.240641][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.297418][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.303239][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 1003.368813][T21832] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x8, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xf803}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1003.608495][T21841] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xfa03}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xa, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:41 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) getcwd(&(0x7f0000003a40)=""/4096, 0x1000) 14:47:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xe, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xfeff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) [ 1004.107439][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.113355][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.177428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.177432][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xff0f}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000952000/0x4000)=nil, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@local, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) r3 = getegid() r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe8) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{0x2, 0x6}, {}, {0x2, 0x2}, {0x2, 0x4}, {}, {0x2, 0x0, r5}, {0x2, 0x7}, {0x2, 0x6}, {}]}, 0x6c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x5, r2, r3, r5, r6, 0x20, 0x9}, 0x6, 0x9, 0x4000, 0x1ff, r7, r8, 0x1f}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x15, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast}]}, 0x2c}}, 0x0) 14:47:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x10, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:41 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x102, 0x1000000005c832, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000040)=0x995e000000000) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x2, &(0x7f0000000000)='\\\x00', 0x2) 14:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x45) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0x8188aea6, 0x0) 14:47:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="f6000000006912e1730049d3bb6d69e40600bb8ad2e0000000000000") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3af, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000001e0007041dfffd946f610500020000000000000000000800080001000400097e", 0x24}], 0x1}, 0x0) finit_module(r0, &(0x7f0000000040)='\x00', 0x7) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r2, &(0x7f0000000080), 0x1b) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r3, &(0x7f0000000080), 0x1b) listen(r3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="88000000a53c26762b3b80fc12f1035dc869a6b11074819f8d96f506b6eea3fd5c981abd4881ac59f34581f2e5a75844db62d612df05f7ba2b9f99b41b8b717656a25e756dcac62d30319dc3e048e7429f4b9c61f094c4b25043f55301ec128983a54bbcd6ade00e0fc5621994199bbf20c50c4c7a60929429aea14ebb946059957ecbdc4b908be0ba93c7"], &(0x7f0000000100)=0x90) recvmmsg(r1, &(0x7f0000002c40)=[{{&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000004c0)=""/201, 0xc9}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x5, &(0x7f0000000840)=""/153, 0x99}, 0x2000000000000000}, {{&(0x7f0000000900)=@rc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/179, 0xb3}, {&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/94, 0x5e}, {&(0x7f0000001b00)=""/212, 0xd4}], 0x5, &(0x7f0000001c80)=""/183, 0xb7}, 0x3}, {{&(0x7f0000001d40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001dc0)=""/52, 0x34}], 0x1, &(0x7f0000001e40)=""/32, 0x20}, 0xfffffffffffffffd}, {{&(0x7f0000001e80)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001f00)=""/40, 0x28}], 0x1, &(0x7f0000001f80)=""/14, 0xe}, 0x8}, {{&(0x7f0000001fc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002040)=""/50, 0x32}, {&(0x7f0000002080)=""/180, 0xb4}, {&(0x7f0000002140)=""/97, 0x61}, {&(0x7f00000021c0)=""/75, 0x4b}], 0x4}, 0x8}, {{&(0x7f0000002280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002300)=""/102, 0x66}, {&(0x7f0000002380)=""/49, 0x31}, {&(0x7f00000023c0)=""/7, 0x7}, {&(0x7f0000002400)=""/77, 0x4d}, {&(0x7f0000002480)=""/173, 0xad}], 0x5, &(0x7f00000025c0)=""/166, 0xa6}, 0xfffffffffffff366}, {{&(0x7f0000002680)=@nfc_llcp, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002700)=""/98, 0x62}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/149, 0x95}, {&(0x7f0000002900)=""/36, 0x24}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/82, 0x52}, {&(0x7f0000002a80)=""/87, 0x57}, {&(0x7f0000002b00)=""/55, 0x37}], 0x8, &(0x7f0000002bc0)=""/68, 0x44}, 0x7}], 0x7, 0x10000, &(0x7f0000002e00)) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000002e40)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={r4, 0x8}, 0x8) sendmmsg$alg(r1, &(0x7f00000001c0), 0x0, 0x4000000) 14:47:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x2c, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xfffe}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x33, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14778}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14779}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1477a}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x48, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:42 executing program 4: msgrcv(0x0, 0x0, 0x19862d3d838e3b48, 0x0, 0x92453c49533c5dfc) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xc0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 14:47:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4c, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1477b}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0xa800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r4 = dup3(r2, r3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) 14:47:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1477c}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/77, 0x4d) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x68, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1005.917438][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:43 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r2, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000040)={0x0, 0x10001, 0x8, [], &(0x7f0000000000)=0x6}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000001c0)=0xc) keyctl$get_persistent(0x3, r4, 0x0) 14:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1477d}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6c, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1006.191307][T22039] validate_nla: 10 callbacks suppressed [ 1006.191318][T22039] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1477e}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x2}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x74, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1477f}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1006.422702][T22051] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7a, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) [ 1006.561390][T22065] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14780}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1006.744851][T22079] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:44 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001280)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000400)=0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="65786563203a0c4ecd541384a281d75f72da1bc5f81400de9ce7f441ae458c64730830c84594cbd49bd269b03054f71bd5f94a59151e5c449af209c513e30a16739575870837939f3fd5946d27cc7b21822088c670a3c3b3b2f84975faa9657ea7aba23703920e36070aea867d3ec620495e31d04fbfbacd72cab8fe35997486df4efe11ca9a01d49839511733adda47d24195adacec5fa1b1a25aa20d4690cb90282cf72499d1477d1acb421a08476e0d6d2f"], 0x7) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x2, 0x10012, 0x3, r0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000001000)=""/142) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000000c0)={0x1, {r3, r4+30000000}, 0x7f, 0x5}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x800, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000b80)={0x3, &(0x7f0000000b40)=[{}, {}, {}]}) setpriority(0x0, 0x0, 0xffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000c80)='TIPC\x00') open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) 14:47:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0xe}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14781}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xc0, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) 14:47:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000005c0)={0x8, 0x40000100, 0x10000}, 0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)) sched_yield() futex(&(0x7f0000000500)=0x2, 0x0, 0x1, 0x0, &(0x7f0000000380)=0x1, 0x2) connect$inet(r0, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000800)=""/156, &(0x7f0000000600)=0x9c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') r2 = fcntl$dupfd(r0, 0x0, r0) statx(r2, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000400)={0xfcca}, 0xffffff25) bpf$PROG_LOAD(0x5, 0x0, 0xffffffd9) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000), &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x80000003, 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RSTAT(r2, 0x0, 0xed) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="3a4a1c1ccad2b7477a00757bb551fbfb4cfae857553dc5120fb772148586aacd504dd4830d305f11701fa97022d347fde641b80d887b748b68cfbc2059f132f54836868cd341556a40567fd50360199806a62aef03ed270736e40e9464baf18dba3b02e2c29fbc193c8c28be55f783185e88f8a27957d8ff99551d619956b0f700000000000007000000308e12c929e10ea07d2ff54af12196af42038282653d57d4bc28d0d3d075da4661c55b9038c93467d55fcddf2f78dfd76fa85cf1cfabdbd5bb2afb937aa39774544c69caa58c6ae24221d47edbd272dbb2d863c0be051ab87f17d9cc6543e64507da114fabae658364ee30310000000000000000fc1c6013d265d47b3b1257d6f5e72d11c1d431f15a1ed830d475a0620e05f61d47ec9ce7dacc7802d16f9f0c"], 0xe1) accept4(r1, &(0x7f00000001c0)=@xdp, &(0x7f0000000140)=0xfffffd04, 0x80800) connect(r0, &(0x7f0000000480)=@nl=@unspec, 0x80) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) [ 1007.065063][T22090] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) 14:47:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x300, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14782}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x347, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14783}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1007.331587][T22123] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0xe00}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000280), 0x4) 14:47:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0xff2b}]) 14:47:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3aa, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200000000, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f}, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r2, 0x0) [ 1007.648347][T22140] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14784}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x800) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0xffffffffffffffc1, 0x0, 0x2, 0x51}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe7e}], 0x1}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0x4) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 14:47:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x500, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1007.756695][T22164] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14785}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x3f00}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1008.008370][T22174] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x49d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000004d6, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x179}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xc0100, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) seccomp(0x0, 0x0, &(0x7f0000000400)={0x0, 0x0}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 14:47:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x600, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14786}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1008.267447][ C0] net_ratelimit: 19 callbacks suppressed [ 1008.267475][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.278955][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.337423][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1008.337462][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1008.343244][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:45 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x700, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1008.463360][T22196] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x4000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14787}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:45 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xa00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f00000005c0)=[{r0, 0x5d3df9b9d983a35f}], 0x1, 0xfffffffffffffffe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x4}}, 0xe8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)={r3, 0x3, 0x6, "e8902c7006025b8cea60e9f1026981e15811abe314e7819ea263d77f32084a1a953be6dbe32434aa2eb46257b16af1df1b63a5b2b9626e9ba9ab255ee851b85cde0769c6c4f06795fdfdec2dce9053a1987113ec4197ddabd4ad8885be4574d0d349625d23981082d6b0f13023bb6a0fcdd120c79af553e16e8e76c583ffe69c2449e4d3dc43ba0ad4f88a19360aaf039df21c97cc28a8be9c5e9dfca45b79604688"}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f00000002c0)={@loopback, @empty}, &(0x7f0000000300)=0xc) sendmmsg(r1, &(0x7f0000005fc0), 0x400023a, 0x58) r5 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x3, 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x800, 0x0) 14:47:46 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14788}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x31e1d}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 1009.096133][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xe00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14789}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x1000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x2000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1009.457418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.463305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.469157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.474924][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.537415][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:47:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x2c00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1478a}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}}) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x9bd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0x0, 0x0, 0x0, 0xfffffffffffffffc], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) signalfd4(r5, &(0x7f0000000200)={0x4}, 0x8, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r6 = dup3(r1, r2, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r6, r7, &(0x7f0000000040), 0x7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r10}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r10, 0x6, 0x30}, &(0x7f00000001c0)=0xc) r11 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0xe57a06a5c03b26cc) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) ioctl$ION_IOC_HEAP_QUERY(r11, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)}) [ 1009.828420][T22295] input: syz1 as /devices/virtual/input/input21 14:47:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x2000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3300, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1478b}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1010.121059][T22314] input: syz1 as /devices/virtual/input/input22 14:47:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xc7, @ipv4={[], [], @local}}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r0) 14:47:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3f00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1478c}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1010.393693][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0xe000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000000)=ANY=[@ANYRES16]) 14:47:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1478d}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x1d1e0300}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000000)={0x7, 0x3, 0x1, {0x8, 0xa9, 0x0, 0x7}}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000040)="11dca50d5e0bcf") r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000380)=0x4, 0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/.yz1\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000100)={0x0, 0x1000, 0x0, 0x0, 0x8}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00\x00\x00\x00\x00\x00\b\x00', 0x4009}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f00000000c0)) 14:47:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4703, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1478e}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1478f}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4800, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x3f000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 1011.441348][T22401] validate_nla: 8 callbacks suppressed [ 1011.441357][T22401] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1011.468587][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4c00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, 0x0) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14790}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x40000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = open(&(0x7f0000000040)='./file0\x00', 0x100200, 0x8) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000080)) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$NBD_DISCONNECT(r4, 0xab08) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r8, &(0x7f0000000080), 0x1b) listen(r8, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f00000004c0)=0x2, 0x4) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = fcntl$dupfd(r6, 0x3482d55217afe70f, r7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r10, 0x1}}, 0x18) sendto$inet6(r2, &(0x7f0000000200)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) r11 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r11, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 14:47:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() 14:47:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1011.868377][T22428] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6800, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x100000000000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe46, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0x0, 0x2, {{0x3, 0x0, 0x6, 0x200, 0xfffffffffffffffb, 0x1, {0x3, 0x0, 0x3, 0x80000000, 0x5e0, 0x4bd, 0x7fffffff, 0x0, 0x279, 0x8000, 0xffffffff, 0x0, 0x0, 0x0, 0x4}}}}, 0xa0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x8001) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = getegid() keyctl$chown(0x4, 0x0, r3, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x2}}, 0x20) accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 14:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14791}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe46, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000480)={0xa0, 0x0, 0x2, {{0x3, 0x0, 0x6, 0x200, 0xfffffffffffffffb, 0x1, {0x3, 0x0, 0x3, 0x80000000, 0x5e0, 0x4bd, 0x7fffffff, 0x0, 0x279, 0x8000, 0xffffffff, 0x0, 0x0, 0x0, 0x4}}}}, 0xa0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x8001) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = getegid() keyctl$chown(0x4, 0x0, r3, r4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x2}}, 0x20) accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) [ 1012.288374][T22459] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:47:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) 14:47:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6c00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x200000000000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14792}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:49 executing program 4: ptrace$peek(0x2, 0x0, &(0x7f0000000000)) r0 = gettid() ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000180)={0x12, 0xc3, &(0x7f0000000080)="849f338ec5df5823f948d55879842389896b0b118c51f4cfa449f251e5e4b398658975975082f7ed08c1f36908d2c9eedb4597f734e154ceef3c4f8704b1e96af1fca4206ded758a0e282c0db3400dbd110fe7f87a1c7f886d08d1aeffe532ca84231ecdd173d753253f1a0e560461bc038d026ca9d44dd8203ce4dba17de3fbc669d8f1d8a3647d0038127ff0712afd5c8b9bbd702547031bfbc0d822ad9759ec595c91e6ac1848f0c95882cc7bbd0b52dff417e024c2fa0a62b39949a64f65a5bbf0"}) capget(&(0x7f00000002c0)={0x19980330, r0}, &(0x7f0000000300)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x6f, 0x2}, 0x9) 14:47:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) 14:47:49 executing program 4: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x5, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@initdev, @multicast1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r4) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r2, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) rmdir(&(0x7f00000003c0)='./bus\x00') ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a2, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000440)=@fragment, 0x8) r6 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r6, 0x7ffd) sendfile(r3, r6, 0x0, 0x8040fffffffd) 14:47:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, 0x0) 14:47:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7400, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1012.666594][T22486] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1012.703296][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14793}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) [ 1012.928229][T22513] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\x02', 0x22000000c0ffffff}) 14:47:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0xe00000000000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x400, 0x0) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x80000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38ffffffff40c4149e83deca96b48ba1"], 0x0, 0x10}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x9, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xff, 0xffffffffffffffff], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000380)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40, 0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x0, 0x9}, 0x7, 0x0, 0x3, 0x0, 0x0, "fdef6bc9ea9f666a5eac70f286d0e2e9c0f2a5fa3a048e12da6061f63df10d77d0b8467d94c13617a9b14031829a085956ec3db9ac62460f54358caacd1e0a17a170190768cdd5c0bd630bdfbea71ee31b654c3d8d12c955ebf26f0956462e1578188c060806b526db95bd1f72f3fe49ad257eef556017283f45c259823cdbd9"}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80200, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x82) r8 = dup3(r6, r7, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r8, r9, &(0x7f0000000040), 0x7) ioctl$VHOST_VSOCK_SET_GUEST_CID(r9, 0x4008af60, &(0x7f00000001c0)) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000140)={0x7, 0x100000000}, 0x2) 14:47:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7a00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 14:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14794}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1013.085749][T22530] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 14:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14795}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xaa03, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 14:47:50 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time, 0x0, {0x7ff}, 0x0, 0x6}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000280)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r4 = dup3(r2, r3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x82) r8 = dup3(r6, r7, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r8, r9, &(0x7f0000000040), 0x7) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r11 = getpid() capget(&(0x7f0000000140)={0x19980330, r11}, &(0x7f0000000180)) 14:47:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x1d1e030000000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 1013.465330][T22541] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\x03', 0x22000000c0ffffff}) 14:47:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 14:47:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xc000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14796}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1013.617422][ C1] net_ratelimit: 17 callbacks suppressed [ 1013.617430][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.628920][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1013.634759][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.637018][T22566] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1013.640527][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:47:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xff00, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14797}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1013.696436][T20101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1013.704559][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1013.704605][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 14:47:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x3f00000000000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\x04', 0x22000000c0ffffff}) [ 1013.870164][T22580] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14798}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1014.091959][T22596] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:51 executing program 4: r0 = socket(0x10, 0x180808, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x42402, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='-GPLem1ppp1\x00', 0xc, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000140)=0x3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl(r1, 0x44b, &(0x7f0000000000)="49d4c104dc5e36fb1f5bd1091bc3a326f6c8c824c8c730838d46935e5c80b9ff59d6d3edef45e8a5bcf07bf38947f8990c93fc0921c90d42555dd2e8003ef0c334362a29c88b3a3545b94323809de8c9977856addefee201121a4ac98b125afb1c9b893e4775d1") write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200200000000000000000000800020000000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) 14:47:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xff2b}]) 14:47:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x16000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x14799}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\x05', 0x22000000c0ffffff}) 14:47:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x4000000000000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x7, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, 0x0, 0x0) socket$inet(0x2, 0x4, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000033001901000000000000000003000000ffd38d9b0c0001000600060008000000fafbb35d679da823481cd39ccc67feb2591da834656c61e33066c82d41db363f9ee1e203b4fe498a6a0ac5f48684af1a9a22cf20daa1d8a0e12060"], 0x24}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setns(r1, 0x72000000) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000200)={@rand_addr, @multicast2}, &(0x7f0000000240)=0xc) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r5, &(0x7f0000000080), 0x1b) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) ftruncate(r6, 0x10084) sendfile(r3, r6, 0x0, 0x72439a6b) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000000c0)={0x2}) [ 1014.497424][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.503343][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.536316][T22623] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1014.577407][ C1] protocol 88fb is buggy, dev hsr_slave_0 14:47:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0xffffffff00000000}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:51 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x4, 0x2, 0x1}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000080)={0x98f904, 0x2, @name="df5833da855ed2f9ca929d5188c562d94eba468d72082f603e7fe3c4f25169ea"}) 14:47:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x52000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1479a}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000380)={'\b\x00z', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)=@secondary='builtin_and_secondary_trusted\x00') keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) 14:47:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000080), 0x4) pipe(&(0x7f0000000000)) [ 1014.937648][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xff2b}]) 14:47:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x54000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\x06', 0x22000000c0ffffff}) 14:47:52 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x3, 0xffffffffffffff01, 0x8, 0x9, 0x0, 0x3, 0x5}, 0x1c) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000001c0)) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x0) fremovexattr(0xffffffffffffffff, 0x0) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x0) gettid() openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x40000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) fcntl$getflags(0xffffffffffffffff, 0x0) dup2(r1, r3) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000e4e000)=0x200000000) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000040), 0x4) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/171, 0xab}, 0xcb20}], 0x1, 0x40, &(0x7f0000000880)={0x0, 0x1c9c380}) r6 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0xffff, 0x91b66b22650d2e88) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000380)={0x4, 0x6, 0x4, 0x73900, {0x77359400}, {0x2, 0x0, 0xe00000, 0x5, 0x7f, 0x4, "0cd50bb5"}, 0x8c55, 0x4, @userptr=0x6, 0x4}) write$vnet(r4, &(0x7f0000000280)={0x1, {&(0x7f00000000c0)=""/104, 0xfffffffffffffd22, 0x0, 0x0, 0x2}}, 0x68) socket$alg(0x26, 0x5, 0x0) 14:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1479b}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1479c}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x8fa01, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:52 executing program 4: r0 = userfaultfd(0xaff5512d11ad72e8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, [], [{0x1ff, 0x7f, 0x10000, 0x5, 0x3, 0x2e6}, {0x101, 0x3ff, 0x7ff, 0x3479, 0x3, 0xb4}], [[], []]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xfffffffffffffffc, 0xe0104) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000680)={0x2, 0x70, 0x3e7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x692f, 0x10000}, 0x0, 0x0, 0x10000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000060000000000000000000000000000000000000000000000cb1a732355f1b8d8307cb8a1309a703a4d0405ef4b3c054c5c79feed4ef19ff2151fb944d390e82f36486c38f0e576d7f1c81ac1ba3e367f46ec5b3b0e96afd3d76340"]) 14:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1479d}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x97596, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xff2b}]) 14:47:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\a', 0x22000000c0ffffff}) 14:47:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1479e}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x200000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000200000002dbd7000fedbdf250a00107f0900000008000000010000001400010000000000000000000000000000000001a7f0a9b9c7ef1d57774d196fd4b128d1253597aa9689e5f9ea46be756eca049de248559d337cc92c07178b1c81cbd605e1a3ab43ad698b534448561edfb610b4d4201250b5935ddf1e9dadc59048d74e6aa77a19d6dacd8b109883c3f65f988cf8ed270c70f06aa4d715368a12890f7f1a5d81bc08cd3bc613336200"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x8000000) sendfile(r3, r4, &(0x7f0000000040), 0x7) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x12, 0x400000000000109, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="a8dd59763c144e2302eed66756b9b0064d962e25d6d5f2e23fe3e61c384645a743ea1c5688be99b227c952d010dce859e2d90a0f8865667611db4716bb63ecb70dbc906a4f1345c8cda8dc2d3dd55f9677", 0x51, r5}, 0x68) r6 = socket(0x10, 0x80002, 0x0) r7 = msgget$private(0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_dccp_buf(r3, 0x21, 0xf, &(0x7f0000000580)=""/150, &(0x7f0000000300)=0x96) msgrcv(r7, &(0x7f0000000900)={0x0, ""/81}, 0x59, 0x0, 0x1000) msgctl$IPC_INFO(r7, 0x3, &(0x7f00000003c0)=""/217) sendmmsg$alg(r6, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:47:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x200500, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1479f}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1016.361682][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x400000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:53 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\b', 0x22000000c0ffffff}) [ 1016.479226][T22726] validate_nla: 6 callbacks suppressed [ 1016.479235][T22726] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a0}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 1016.746128][T22739] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) 14:47:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x400500, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a1}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\n', 0x22000000c0ffffff}) 14:47:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c0002000800040000000000003899ba37ff5c7789acf352a881d5a906e2f174c3344295d6160f8de72b85175541cc11c7fabed5a7413a5dcb092ff5a3393f21e6524f2b7965641e94"], 0x38}}, 0x0) [ 1017.215595][T22754] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1017.255064][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000400)="baa099ec6766c74424000f0000006766c7442402060000006766c7442400f40000006766c7442402070000006766c744240600000000670f011424670f01142465f30f008f6300a6aff4660f3a62227d0f22996635000040000f22e0260f0350000f01cf", 0x4b}], 0x1, 0x0, 0x0, 0xffffffffffffff27) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xfffffffffffffdd9, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f00000002c0)={0xc9dcddb313ff7471, 0x0, 0x3, 0x2, {0x7, 0x8, 0x7, 0x80}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000}, 0x1000, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getpid() syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r4 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x2, 0x20000) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000340)={0x5, 0x4, 0x20}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000080)=0xd904) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20800, 0x0) r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe8) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{0x2, 0x6}, {}, {0x2, 0x2}, {0x2, 0x4}, {}, {0x2, 0x0, r7}, {0x2, 0x7}, {0x2, 0x6}, {}]}, 0x6c, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, 0x0) fstat(r10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r5, &(0x7f0000000380)='./file0\x00', r7, r11, 0x1400) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:47:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x600100, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1017.265289][T22762] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 14:47:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) 14:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) 14:47:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\x1a', 0x22000000c0ffffff}) [ 1017.603376][T22779] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:54 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x800000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1017.800951][T22800] FAULT_INJECTION: forcing a failure. [ 1017.800951][T22800] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.818834][T22800] CPU: 1 PID: 22800 Comm: syz-executor.1 Not tainted 5.3.0-rc8+ #0 [ 1017.826743][T22800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.836798][T22800] Call Trace: [ 1017.840098][T22800] dump_stack+0x172/0x1f0 [ 1017.844513][T22800] should_fail.cold+0xa/0x15 [ 1017.849448][T22800] ? fault_create_debugfs_attr+0x180/0x180 [ 1017.855242][T22800] ? page_to_nid.part.0+0x20/0x20 [ 1017.860254][T22800] ? ___might_sleep+0x163/0x280 [ 1017.865095][T22800] __should_failslab+0x121/0x190 [ 1017.870019][T22800] should_failslab+0x9/0x14 [ 1017.874502][T22800] kmem_cache_alloc+0x2aa/0x710 [ 1017.879354][T22800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1017.885572][T22800] ? _copy_from_user+0x12c/0x1a0 [ 1017.891360][T22800] io_submit_one+0x10f/0x2ef0 [ 1017.896022][T22800] ? perf_trace_lock_acquire+0xf5/0x530 [ 1017.901555][T22800] ? aio_poll_complete_work+0xfb0/0xfb0 [ 1017.907094][T22800] __x64_sys_io_submit+0x1bd/0x570 [ 1017.912186][T22800] ? __x64_sys_io_submit+0x1bd/0x570 [ 1017.917448][T22800] ? __ia32_sys_io_destroy+0x420/0x420 [ 1017.922894][T22800] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1017.928946][T22800] ? trace_hardirqs_off_caller+0x65/0x230 [ 1017.934648][T22800] do_syscall_64+0xfd/0x6a0 [ 1017.939133][T22800] ? do_syscall_64+0xfd/0x6a0 [ 1017.943790][T22800] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.949658][T22800] RIP: 0033:0x4598e9 [ 1017.953534][T22800] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.973123][T22800] RSP: 002b:00007fe14e3c0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1017.981522][T22800] RAX: ffffffffffffffda RBX: 00007fe14e3c0c90 RCX: 00000000004598e9 [ 1017.989472][T22800] RDX: 0000000020000040 RSI: 000000001e09328e RDI: 00007fe14e3a0000 [ 1017.997434][T22800] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1018.005394][T22800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe14e3c16d4 [ 1018.013345][T22800] R13: 00000000004c0cb2 R14: 00000000004d3d80 R15: 0000000000000004 14:47:55 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x1e, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x5, 0x1, 0x1, 0x6]}) 14:47:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:55 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:55 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x2, 0xfff}) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1a480, 0x0) [ 1018.138803][T22809] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 1018.155974][T22805] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1018.229063][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x80ffff, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a4}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:55 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_misc(r2, &(0x7f0000000540)={'syz1', "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"}, 0x1004) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5X\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x03\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zpw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.771434][T22819] RSP: 002b:00007fe14e3c0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1018.779912][T22819] RAX: ffffffffffffffda RBX: 00007fe14e3c0c90 RCX: 00000000004598e9 [ 1018.787892][T22819] RDX: 0000000020000040 RSI: 000000001e09328e RDI: 00007fe14e3a0000 [ 1018.795850][T22819] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1018.803798][T22819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe14e3c16d4 [ 1018.811745][T22819] R13: 00000000004c0cb2 R14: 00000000004d3d80 R15: 0000000000000004 [ 1018.820183][ C1] net_ratelimit: 20 callbacks suppressed [ 1018.820191][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.827752][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:47:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00H', 0x22000000c0ffffff}) [ 1018.831627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1018.837285][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1018.848836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1018.854581][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:47:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xc00000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1018.897555][T22830] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:56 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:56 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_misc(r2, &(0x7f0000000540)={'syz1', "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"}, 0x1004) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5X\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x03\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zpw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.630692][T22844] RSP: 002b:00007fe14e3c0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1019.639084][T22844] RAX: ffffffffffffffda RBX: 00007fe14e3c0c90 RCX: 00000000004598e9 [ 1019.647048][T22844] RDX: 0000000020000040 RSI: 000000001e09328e RDI: 00007fe14e3a0000 [ 1019.654996][T22844] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1019.662947][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe14e3c16d4 [ 1019.670898][T22844] R13: 00000000004c0cb2 R14: 00000000004d3d80 R15: 0000000000000004 [ 1019.688725][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:56 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x5) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r2, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) [ 1019.709804][T22850] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:56 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x1000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a6}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1019.857444][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.863303][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.869178][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1019.874935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1019.891057][T22868] FAULT_INJECTION: forcing a failure. [ 1019.891057][T22868] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.939122][T22868] CPU: 1 PID: 22868 Comm: syz-executor.1 Not tainted 5.3.0-rc8+ #0 [ 1019.947037][T22868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.957082][T22868] Call Trace: [ 1019.960380][T22868] dump_stack+0x172/0x1f0 [ 1019.964716][T22868] should_fail.cold+0xa/0x15 [ 1019.969331][T22868] ? fault_create_debugfs_attr+0x180/0x180 [ 1019.975133][T22868] ? page_to_nid.part.0+0x20/0x20 [ 1019.980773][T22868] ? ___might_sleep+0x163/0x280 [ 1019.985630][T22868] __should_failslab+0x121/0x190 [ 1019.990568][T22868] should_failslab+0x9/0x14 [ 1019.995066][T22868] kmem_cache_alloc_node_trace+0x274/0x750 [ 1020.000882][T22868] ? kasan_unpoison_shadow+0x35/0x50 [ 1020.006162][T22868] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1020.011965][T22868] __kmalloc_node_track_caller+0x3d/0x70 [ 1020.017588][T22868] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1020.022937][T22868] __alloc_skb+0x10b/0x5e0 [ 1020.027339][T22868] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1020.032437][T22868] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1020.038221][T22868] ? kasan_slab_alloc+0xf/0x20 [ 1020.042969][T22868] ? kmem_cache_alloc+0x121/0x710 [ 1020.047989][T22868] ? dst_alloc+0x10e/0x200 [ 1020.052397][T22868] ? rt_dst_alloc+0x83/0x3f0 [ 1020.056986][T22868] ? ip_route_output_key_hash_rcu+0x8d7/0x2d70 [ 1020.064350][T22868] ? ip_route_output_key_hash+0x1ef/0x360 [ 1020.070049][T22868] ? ip_route_output_flow+0x28/0xc0 [ 1020.075237][T22868] alloc_skb_with_frags+0x93/0x580 [ 1020.080354][T22868] sock_alloc_send_pskb+0x7ad/0x920 [ 1020.085538][T22868] ? __kasan_check_read+0x11/0x20 [ 1020.090552][T22868] ? proto_register+0x990/0x990 [ 1020.095383][T22868] ? rt_add_uncached_list+0x147/0x1a0 [ 1020.100744][T22868] ? trace_hardirqs_on+0x67/0x240 [ 1020.105789][T22868] ? rt_add_uncached_list+0x147/0x1a0 [ 1020.111167][T22868] ? __local_bh_enable_ip+0x15a/0x270 [ 1020.116524][T22868] sock_alloc_send_skb+0x32/0x40 [ 1020.121441][T22868] __ip_append_data.isra.0+0x16d5/0x30f0 [ 1020.127070][T22868] ? ip_reply_glue_bits+0xc0/0xc0 [ 1020.132088][T22868] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 1020.138490][T22868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1020.144711][T22868] ? ip_setup_cork+0x548/0x870 [ 1020.149463][T22868] ip_make_skb+0x249/0x2c0 [ 1020.153856][T22868] ? ip_reply_glue_bits+0xc0/0xc0 [ 1020.159639][T22868] ? ip_flush_pending_frames+0x30/0x30 [ 1020.165086][T22868] ? ip_route_output_key_hash_rcu+0x2d70/0x2d70 [ 1020.171311][T22868] ? __kasan_check_read+0x11/0x20 [ 1020.176324][T22868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1020.182540][T22868] ? xfrm_lookup_route+0x5b/0x1f0 [ 1020.187545][T22868] udp_sendmsg+0x1e3b/0x2830 [ 1020.192127][T22868] ? ip_reply_glue_bits+0xc0/0xc0 [ 1020.197216][T22868] ? udp_push_pending_frames+0xf0/0xf0 [ 1020.202671][T22868] ? stack_trace_save+0xac/0xe0 [ 1020.207515][T22868] ? perf_trace_lock_acquire+0xf5/0x530 [ 1020.213051][T22868] ? save_stack+0x5c/0x90 [ 1020.217383][T22868] ? ima_match_policy+0x825/0x1270 [ 1020.222487][T22868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.228809][T22868] ? debug_smp_processor_id+0x3c/0x214 [ 1020.234263][T22868] ? perf_trace_lock_acquire+0xf5/0x530 [ 1020.239791][T22868] ? lock_downgrade+0x920/0x920 [ 1020.244648][T22868] udpv6_sendmsg+0x13b1/0x2990 [ 1020.249398][T22868] ? udpv6_sendmsg+0x13b1/0x2990 [ 1020.254315][T22868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.260567][T22868] ? debug_smp_processor_id+0x3c/0x214 [ 1020.266052][T22868] ? udp_v6_push_pending_frames+0x3b0/0x3b0 [ 1020.271932][T22868] ? debug_smp_processor_id+0x3c/0x214 [ 1020.277380][T22868] ? aa_profile_af_perm+0x320/0x320 [ 1020.282562][T22868] ? aa_file_perm+0x40b/0xeb0 [ 1020.287221][T22868] ? __kasan_check_read+0x11/0x20 [ 1020.292241][T22868] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1020.297992][T22868] ? bpf_prog_kallsyms_find+0x50/0x2c0 [ 1020.303448][T22868] ? lock_downgrade+0x920/0x920 [ 1020.308392][T22868] ? aa_file_perm+0x125/0xeb0 [ 1020.313064][T22868] ? ___might_sleep+0x163/0x280 [ 1020.318253][T22868] ? __might_sleep+0x95/0x190 [ 1020.322921][T22868] ? aa_sk_perm+0x288/0x880 [ 1020.327669][T22868] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1020.333199][T22868] inet6_sendmsg+0x9e/0xe0 [ 1020.337595][T22868] ? inet6_sendmsg+0x9e/0xe0 [ 1020.342167][T22868] ? inet6_ioctl+0x1c0/0x1c0 [ 1020.346740][T22868] sock_sendmsg+0xd7/0x130 [ 1020.351145][T22868] sock_write_iter+0x27c/0x3e0 [ 1020.355890][T22868] ? sock_sendmsg+0x130/0x130 [ 1020.360635][T22868] ? rw_verify_area+0x126/0x360 [ 1020.365474][T22868] aio_write+0x2f2/0x540 [ 1020.369707][T22868] ? aio_read+0x3b0/0x3b0 [ 1020.374038][T22868] ? __kasan_check_read+0x11/0x20 [ 1020.379045][T22868] ? lock_downgrade+0x920/0x920 [ 1020.383873][T22868] ? __might_fault+0xfb/0x1e0 [ 1020.388543][T22868] io_submit_one+0x1012/0x2ef0 [ 1020.393300][T22868] ? perf_trace_lock_acquire+0xf5/0x530 [ 1020.398838][T22868] ? aio_poll_complete_work+0xfb0/0xfb0 [ 1020.404372][T22868] __x64_sys_io_submit+0x1bd/0x570 [ 1020.409469][T22868] ? __x64_sys_io_submit+0x1bd/0x570 [ 1020.414820][T22868] ? __ia32_sys_io_destroy+0x420/0x420 [ 1020.420783][T22868] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1020.426827][T22868] ? trace_hardirqs_off_caller+0x65/0x230 [ 1020.432527][T22868] do_syscall_64+0xfd/0x6a0 [ 1020.437009][T22868] ? do_syscall_64+0xfd/0x6a0 [ 1020.441666][T22868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.447532][T22868] RIP: 0033:0x4598e9 [ 1020.451405][T22868] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.471013][T22868] RSP: 002b:00007fe14e3c0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1020.479461][T22868] RAX: ffffffffffffffda RBX: 00007fe14e3c0c90 RCX: 00000000004598e9 [ 1020.487420][T22868] RDX: 0000000020000040 RSI: 000000001e09328e RDI: 00007fe14e3a0000 [ 1020.495378][T22868] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1020.503426][T22868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe14e3c16d4 [ 1020.511374][T22868] R13: 00000000004c0cb2 R14: 00000000004d3d80 R15: 0000000000000004 14:47:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x1000194, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1020.537411][T22876] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00L', 0x22000000c0ffffff}) 14:47:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a7}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:57 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="230000005e0081aee409f6d8ffffff9e00"/35, 0x23}], 0x1}, 0x880) 14:47:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x1fa0800, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1020.857949][T22883] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:58 executing program 4: ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000100)=0x3) [ 1020.917186][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a8}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:58 executing program 4: socket(0x2000000100000010, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x2d3, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x20000008) 14:47:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x2d6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:47:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x11, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00h', 0x22000000c0ffffff}) 14:47:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x2000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147a9}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x21, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147aa}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x1100, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00l', 0x22000000c0ffffff}) [ 1021.737156][T22960] validate_nla: 2 callbacks suppressed [ 1021.737165][T22960] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147ab}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x5000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:59 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x20000000000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x80000000000, 0x0, @remote, 0x400000000c}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f00000000]}, 0x7}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x81, 0x800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000340)={0x0, &(0x7f0000000300), 0x1, r0, 0x5}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0xf9680d9c3f1e1f77, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000004c0)={0x1, 0x2, [0x1, 0x7, 0x1ff, 0x3, 0x3a9, 0x80000001, 0x4]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="07001a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000000009000000006a70e999a5f39e05a2e5fd240f9e3baa9e487c7543805fed"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000140)=0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r12}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000500)={r12, 0x8, 0x20, 0x1ff, 0x2}, &(0x7f0000000540)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r9, 0xb8, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x8, @mcast2, 0x9}, @in6={0xa, 0x4e23, 0x3, @remote, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e24, 0x4a, @rand_addr="fe54fb7c107f722d330c65b0c43bee72", 0x4}, @in6={0xa, 0x4e24, 0x6, @remote, 0x80}, @in6={0xa, 0x4e21, 0x1000, @empty, 0x40}, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @broadcast}, 0x5}]}, &(0x7f0000000480)=0x10) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000200)={@mcast2}, &(0x7f0000000240)=0x14) 14:47:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1022.030608][T22983] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1022.093706][T20101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:47:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147ac}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1022.215032][T23007] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7600, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147ad}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:47:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/d\x81/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) socketpair(0x4, 0x3, 0x3, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000000000002007b9e0000000bbc055a000000001c00000000000000335464f7000000002e9c45c7d77f742000000000000000a2014e814569470300000000000000d5495e424bdf4aa02db52193d37646fa1582557202cab49a7e9b9d3c4e34e195a981ef5a9a8fdcde2720d3cec68861a27b84b2b78fea4ae35b61b98031202a990924e9609ca6b7a7b6b9a57e2577fd8637b7bcd1758af90e3cfe75cbb833ff2beb63f762748fc99e9fd3a3859dbd733bf5f0d2780006000000c0193b976f00000000ff0300002b9502917e243ce45f92da5593"]) dup2(r0, r1) 14:47:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00t', 0x22000000c0ffffff}) [ 1022.457482][T23024] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:47:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x9600, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:47:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147ae}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:47:59 executing program 4: r0 = socket$inet(0x10, 0x4000000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="230000002c0007031dfffd946f610504000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa02e208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x1) 14:47:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x34000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:47:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) [ 1022.834836][T23051] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x400000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00z', 0x22000000c0ffffff}) 14:48:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x8000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x5, 0x102000200032, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', r4}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000040)={0x7bc91fa19a4b84af, 0x1, [0xfff, 0x40, 0x1895, 0x8, 0x6b, 0x1, 0x100000000, 0x80000001]}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xaf, 0x7, 0x15, 0x10, "f46072c30bac521c7deb2dee93997e5100ad1d6033c8ce363b57c820259d3096424e45b6d81f17dc33d182ff165a3b4aefc9a870b4f19c09ea08847c3493d7f5", "9084900bb66f896d663515e37fb7a2c459ca4a685dbf3d42e6c2e7f54612f7c9", [0xf5b, 0xf09]}) 14:48:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147af}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xdb90987ef1243876) write$vhci(r0, &(0x7f0000000180)=@HCI_EVENT_PKT={0x4, "d6f51557a4fc5ea80c70abffa2e74a7d37523eff1af90237518e835412c8bbdbfae5b567ee6cb68099e2fd2457067ea61e270015b9af9acc7a9341d4bc92825e04325ab439cd5f22e6ec79c68504e4463300f6785089ca0c4d2b004d130807964e840b3031d797473dcb893d2b72184a2c2276e8c573a3413f49c661638bce6ce3a11de1a351c5baffd678631facb139c32432e0d123f03ec8f59cb5afafc0ff6afb938d3d88774fe9236342870430c1b48dfb3b6af60b56b82101cf7163e1e68884991307"}, 0xc6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@broadcast, 0x4e23, 0x4, 0x4e20, 0x0, 0x2, 0x20, 0x70, 0x3c, r2, 0xffffffffffffffff}, {0x100000001, 0x6, 0x3ff, 0xfb39, 0x8, 0x6}, {0x6, 0x8, 0x1, 0x7}, 0x100000001, 0x6e6bba, 0x0, 0x1, 0x1}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d5, 0x7f}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x4bc7}, 0x3504, 0x3, 0x0, 0x7fff, 0x6, 0x4, 0xfc}}, 0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r3, &(0x7f00000000c0), 0x20000000000003fa) [ 1023.038376][T23074] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b0}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x400300, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xa000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1023.234893][T23087] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x50f000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:00 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x2) write$uinput_user_dev(r0, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\v\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x45c) 14:48:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xe000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b1}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:00 executing program 4: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x20000, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) shutdown(0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x400, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080), 0x10) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x80000000) 14:48:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x707100, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1023.609821][T23119] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x70e000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x10000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1023.792494][T23132] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x717000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x2c000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1024.017487][ C1] net_ratelimit: 20 callbacks suppressed [ 1024.017495][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.029139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.035014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.040855][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:48:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x760000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5c0bcfe47bf070") socketpair(0x22, 0x2, 0x21, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newqdisc={0x45c, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x430, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x3}}]}}]}, 0x45c}}, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000280)="69cdfd4dda636894b8fa9520f4063539648361ecc5d4e70c38ff01f61ada51754a7b04a4f64a4125d75270b99a2638249558854d9c7eb4846edf35b20e15760001f084e34bd0d33a4ce4a4733e665b7e4f5215af3742235f3348774f690cf6a51cced587c6d194c70177895f9a15150c5092fa0d4a7ee47adaa5c5c691dca402fb23663c35ceade27b931c1e4473cff53b043420281c82079aab") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x82) r7 = dup3(r5, r6, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r7, r8, &(0x7f0000000040), 0x7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0)="c682d33b756b315f089242913cc9bdf3ab440f05cd05945722dd386d1b56b42beaf943", 0x23, r12}, 0x68) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="00097c17434a8000020665f018b3b6ec44513d576c8767942c630c4d7bbeec3a65107a69e5dc4885c7792130909a840b7794d8ec472eb6a5ea9e51e5a09ab8dbbdc357aaf54087476d72309d315d728b7117ca0461e7f1dcfc6f8803912e7a18e7022a0115cf8bd0b63d9d97c105c65be1b7c817214eb147c5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r14}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={r14, 0x8c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @rand_addr=0x6}, 0x3}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x26}, 0x2}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x80000001}, @in6={0xa, 0x4e21, 0x0, @empty, 0xfff}]}, &(0x7f0000000440)=0x10) 14:48:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b4}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1024.224923][T23160] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1024.235292][T23173] delete_channel: no stack [ 1024.247920][T23173] delete_channel: no stack 14:48:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x960000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}, 0x0}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xe07000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x33000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3f000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf05000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1024.640043][T23173] delete_channel: no stack [ 1024.657486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1024.663320][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1024.681285][T23173] delete_channel: no stack 14:48:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x2, 0x0, 0x0) tkill(r1, 0x14) 14:48:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:02 executing program 4: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) recvfrom(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40000000, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x3, 0x1, 0x3}}, 0x80) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) clock_gettime(0x6, &(0x7f0000000040)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000000)={0x0}) 14:48:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x40000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b6}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1025.057452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.057502][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.063269][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1025.068990][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:48:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b7}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x47030000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b8}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x48000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x5, 0x0, 0x0) tkill(r1, 0x14) 14:48:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x11000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 14:48:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147b9}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4c000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x20000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147ba}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:03 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x24, 0x3e8, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 14:48:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x5ffedfff, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x21000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:03 executing program 4: r0 = socket(0x15, 0x805, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x114, 0x2715, 0x0, &(0x7f000033bffc)) 14:48:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x7, 0x0, 0x0) tkill(r1, 0x14) 14:48:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="00815b", 0x3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, &(0x7f0000000240)=""/83, 0xfffffffffffffdb0, 0x0) r3 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)="e8510fd8e29abb35da61ba5dcbe222bea8ebeb45708da371ad8537e572aa688cf9583304fe25a7258d781f7b523fed68498e5bc3a34a356c08f5bd9d1f9cd155a3a828e8fb8141197b6a3bda9820ca3fab44a0ac48bc4dde8d047237d63eba0c2baa1d91d6e2e5373e0dd5b7a6171fc1de805fc14bbf681ee4b1cf4926d50f9eb4ee83059ef519647617a6aba0", 0x8d}, {&(0x7f00000001c0)="8a265838ca14765c417e2b0a76050f71b8a91c1017e30336e61c2fda0cc69aacdcacdaf7189831a1702bcd99209ef7bc345b5406e3e87ecce85c3c825010998b0c893bc793312e0421e6a9a6618833d288e507f7e26df98a0a6e541a15b82366a4d6b7ca9001dfb993db3d38db7d2796c3c90e6998878cd42b9fb0d1a08961734ee3ba95b7fc46aed1d892e53c5685c7f2", 0x91}, {&(0x7f0000000280)="270273be0ebdcd666a9eec9d825f0d8d5869fe66df02ab6a49db479d11b29fae3e0b372b0c8ea21d1664e0daa2fcd90c9ae61c87ef234a51b0", 0x39}, {&(0x7f00000002c0)="c04f5185143e9910d1acb77c29176d751468edb2d4c41835072d26ab4794143d59f50258921cef9b5581dfe8cc0b05353e6be6fe3edc3244bb8979574a25d7fff5cd480d95ae0dfd04eeac102899318208ab4af811957fbf11ba447f60ca0d5266a03f6998b0000a51c964a884d0f0496eb83c97140f67479c6dd0a4afda7119514575d94ed2449914e1cd25aadd26a9ac7af37fdb713f9f01c8b1e2f22e786cf44dbcef379155635f8bb137e685dcad9391b4b60985e7a9e42f", 0xba}, {&(0x7f0000000380)="0e87f16753128544e7a159ede5283566628b9ef9b31da86cb820b7250ab582d9968a0f745d3bcb5fda3b8f8e249d59f883ff2e53758be4fc646e31ec3f72f4e1ccf2c82bb1d5bca6561bf7e8aa811634d35b5aa6ac95c213b8b0469609912a2791a466cd476cebd87beaa5ae27a978eb34fc5dccb5b9a6a2c888f790121fff859d61a8de", 0x84}, {&(0x7f0000000440)="7f7ff5aeaff764127815658343957a91c9e38d9b027725824ee2a65c2d263d21dbf6cdbdcce771eb97808bebd3c6618a2901cfe4bb20128a7d936ea437f2bdda8c2d74dd5f431870d0046bfc3faa7d3fedc52f851840eb442ab94fdf52c98b0a63dea726bb31a2bea98cdb5519ce45d4886832c68f2d24d1d6dd421108e898989e8852cf0620b16de71d9a937ba21ba5b672ebc33f968c8abd9a35148400aa001565422a267925cb3afcfd2fe62b27cccd3f94cf6bcb5d78d71f19c3f862df246c88389ad09d10127d434040abe5468db9ec05edcf7a8fbe6cba9b4dc929e5bcc5", 0xe1}, {&(0x7f0000000540)="03636ffcc8132f27c6dbd5c455d7e2c9a85a92f25332d10e106b64f8b1daf3958633303563657803a5b872eec89b06e5d1f94915af2acf25d2951a8ed062f35e47b9f34f9abc57bac41bd812e6f42cd4ebf393b87fabbee5e1d61ef4a6189d24659b09df9582c9ad0f1ef0fbb7bf722f67d99b6296a80460c988b813eefbc23373c45013dd5b3c578b9dc29da0e29db9e000b00388b6df41f55838de8588728390f3d5a8a1c626b0c9457fada706d0ef3cd7c460485837ecd9f17b6978fa", 0xbe}, {&(0x7f0000000600)="0dbc3667e443e18e77808571550444f3d85b17f9b369f17ca31b5f5d22a3f35a1c0343feb4ccad55ac18e8a954321cc9ed7495210534a793be6b8b745a46f2d2f8aff620f8599401e6d25174e53e9bc9b9e548925323a48401a6359f916771ee45b38a76536125839b50605c200bdfd4f9281101552ea3b47b741945e493ef8f520f7de90b8476d167582e4780a98968d9e31ae13e2325023006b08ed099dafb946b7eed", 0xa4}], 0x8, r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x1492, {{0xa, 0x4e24, 0x4c88f941, @dev={0xfe, 0x80, [], 0x21}, 0xd22}}}, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r4}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000040), 0x0}, 0x18) 14:48:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147bb}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:03 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x68000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfeffffff, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6c000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1026.748219][T20101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147bc}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xff600000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfe47bf070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000001c0)="2400000018001f00ff03f4f9002304000a04f51108000100020100020800038001000000", 0x24) [ 1026.971502][T23346] validate_nla: 7 callbacks suppressed [ 1026.971511][T23346] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x8, 0x0, 0x0) tkill(r1, 0x14) 14:48:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x74000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147bd}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:04 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x8000) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r2, 0x0, 0x0) r3 = dup(r2) setsockopt(r3, 0x64, 0xde, &(0x7f0000000000)="e1affde3", 0x4) bind$can_raw(r1, &(0x7f0000000080), 0x10) close(r1) 14:48:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1027.506086][T23373] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147be}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7a000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1027.684402][T23388] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2100000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147bf}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x94010001, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1027.867297][T23403] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0xa, 0x0, 0x0) tkill(r1, 0x14) 14:48:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x3a4ee17f0000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c0}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x96750900, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:05 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) 14:48:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xaa030000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1028.379372][T23419] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c1}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x400000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe46, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @empty}, 0x10) munlockall() setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) lstat(&(0x7f00000003c0)='./file0\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) [ 1028.461745][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe46, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @empty}, 0x10) munlockall() setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) lstat(&(0x7f00000003c0)='./file0\x00', 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "78395c95d0fdfb60", "520b1e4a8ff7af2c241636098c1c22ff", "a9016007", "f6885a10e7196cef"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 14:48:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1028.731376][T23445] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xe4ffffff, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:06 executing program 4: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000324, 0x0, 0xfffffffffffffdfc}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) pipe(0x0) pipe(0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x16, &(0x7f0000000480)={&(0x7f0000000240)="c4211156b80665000066450fc2fb0cf3410f52c1c4a2a9a657f59e65466b120cc421f5da138f88008e6439b0012e47dbacf9000000819d", {0x1}, 0x0, &(0x7f0000000300)="26d84c7110c422eddfaa6edd416c6690660f72e0002e66430f7f8658fb0000460b06440f1854f3b141dea8080000003ef33e64dce9c4223d45ec"}, &(0x7f0000000540)={0x0, {}, 0x0, &(0x7f0000000500)="64f30f1ee82e2e450f38021cde6466f3adf30f1230c4810f592f43dbe2f34b0faee9c4e18de4590c0f0d1367476d"}, 0x8, &(0x7f0000000580)) setreuid(0x0, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\x00\x00\x00)\x00', @ifru_flags}) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000040)=0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f00000001c0)) rt_sigprocmask(0x2, &(0x7f00000002c0)={0x8000000000000000}, 0x0, 0x8) openat$ppp(0xffffffffffffff9c, 0x0, 0x101400, 0x0) semget(0x3, 0x3, 0x400) clock_gettime(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x3) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) getitimer(0x0, &(0x7f0000000280)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @multicast2}, &(0x7f0000000380)=0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 14:48:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x760000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0xc7, 0x0, 0x0) tkill(r1, 0x14) [ 1029.217416][ C0] net_ratelimit: 20 callbacks suppressed [ 1029.217423][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.217428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.217466][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.223107][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1029.246095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1029.251877][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:48:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7fe14e3a0000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1029.358323][T23472] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xff000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c3}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1029.427989][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendto$inet(r0, &(0x7f0000000000)="f2a452b205647891394dfb61ba1e9abb2945a6e40603", 0x16, 0x70000040, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) socket(0x10, 0xa, 0x4) 14:48:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7fffffffefff, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xffdffe5f, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c4}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1029.666632][T23501] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x960000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1029.801664][T23515] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xffff8000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c5}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x300, 0x0, 0x0) tkill(r1, 0x14) 14:48:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x40030000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:07 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x3, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r6, 0xd3, "b19fd5b9dd08d3da86aecac4455741557648b07ddd83cf8329aa6a835d37b85d943ab97109d97099595ecd51114d74149bbdabb9afafe3dcaf9a9efe6659ff75ed9ae82aeab82b5c9d8c9e0f365489e874353987cd2b667f159cbc525527cccbecc188794d52943c854569f2596948cfa6eabff49bd3cf61829911bed23c6d124e882e61b73b1b8228df742bf2e51ce7a4be18311c65c6cfbcbd5907199d752df8adda375170d3d4dcdf807f8ae4be7c28dd4f06cf2b6152eb5e2ca580ce0c5eb834544afc4c980b2aa6f7a5a6446771fb8ca5"}, &(0x7f0000000000)=0xdb) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ptrace$setopts(0x4206, r1, 0x0, 0x0) 14:48:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x70710000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1030.168864][T23529] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1030.199741][T23541] ptrace attach of "/root/syz-executor.4"[9758] was attempted by "/root/syz-executor.4"[23541] [ 1030.257429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.263282][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1030.269117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1030.274875][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1030.283313][T23541] ptrace attach of "/root/syz-executor.4"[9758] was attempted by "/root/syz-executor.4"[23541] 14:48:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c6}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xe0700000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_timeval(r0, 0x1, 0x2b, &(0x7f0000000040), &(0x7f0000000080)=0x10) 14:48:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xffffffe4, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf0500000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1030.620512][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x147c7}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x100000000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x10002, 0x0, 0x0) tkill(r1, 0x14) 14:48:08 executing program 4: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x10182) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4002, @empty}, 0xfffffffffffffea9) r2 = accept(0xffffffffffffffff, &(0x7f0000000100)=@caif, &(0x7f0000000180)=0x80) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) sendto(r0, &(0x7f0000000600)="0400", 0x2, 0x8002, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x401, 0x4000) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c4600ffff000000000000110000000000000000000000003800000000000000000000000000200800"/88], 0x58) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7) 14:48:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x1000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x200000000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x3ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/568]}, 0x2b0) socketpair(0x2, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r4 = dup3(r2, r3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x5b, 0x4) 14:48:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x20000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x400000000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x1100000000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:08 executing program 4: socket$unix(0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "36b8217eb950bc32", "f12c452e61c95f7c715874c3d39b6a9a", "5aeb164e", "375b211c79111a56"}, 0x28) [ 1031.616345][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x200000c1, 0x0, 0x0) tkill(r1, 0x14) 14:48:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x20050000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000000000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:09 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f00000001c0)="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", 0x1000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 14:48:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x40000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1031.988711][T23645] validate_nla: 3 callbacks suppressed [ 1031.988721][T23645] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x8000000000000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:09 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x80\x00\x00\x03 \x00\x00\x00\x00\x00p\x80\x00', 0x100000000001}, 0xffffffffffffffbd) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newqdisc={0x45c, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x430, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x8}}, @TCA_CBQ_RTAB={0x404}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x3}}]}}]}, 0x45c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @loopback}, @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xe41, 0x400, 0x0, 0x100, 0x0, 0x82b30328, r5}) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfeffffff00000000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1032.274082][T23660] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x40050000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0xffffff1f, 0x0, 0x0) tkill(r1, 0x14) 14:48:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x60010000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xffefffffff7f0000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:09 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:09 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon0\x00'}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x101, 0x0) r3 = syz_open_dev$usb(0x0, 0x40000fffffb, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000100)={r6, 0x10}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000100)={r6, 0x8}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={r6, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x004\x05\xbde\ag\x98\xa7') getdents64(r7, &(0x7f0000000180)=""/92, 0xff72) pwritev(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00f98909ad00fddbdf25011b53e90d0000000b000000000c001473797a3100000000dde73d965cea80a1b80fcfac13ab204add19f0c8d3f6875de5607c"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000001) [ 1032.878037][T23695] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x80000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xffffffffff600000, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1033.132026][T23711] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x80ffff00000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1033.309097][T23726] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x2, 0x0) tkill(r1, 0x14) 14:48:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xc0000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket(0x800000000010, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x8, 0x3ff, 0x9f6, 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000001c0)=0x1000000, 0x4) write$UHID_CREATE(r3, &(0x7f0000000340)={0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xff\xff\xff\xff\xff\xff\xff\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xbe}, 0x4d6) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) [ 1033.756131][T23734] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x100000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x11, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1033.879181][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1033.896575][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1033.950805][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1033.995953][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.004086][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.012963][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.025047][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.033046][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.040811][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.048567][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.058087][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.065584][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.073350][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.081042][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.088771][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 14:48:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0xe, 0x0) tkill(r1, 0x14) 14:48:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x1000194ffffffff, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1034.096279][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.114346][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.117813][T23760] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1034.121800][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 14:48:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x21, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1034.176922][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.205011][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 14:48:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1034.226924][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.240580][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.261724][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.281360][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.291090][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.314731][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.328451][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.335982][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.346650][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.354373][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.365194][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.372744][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.386199][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.405535][T23779] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1034.414574][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.417424][ C1] net_ratelimit: 19 callbacks suppressed [ 1034.417431][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.431831][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.433428][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.446560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1034.452330][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1034.460817][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.468578][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.476174][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.486748][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.494375][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.505178][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.512716][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.523722][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 14:48:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1100, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0xe00, 0x0) tkill(r1, 0x14) 14:48:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x1fa080000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1034.533127][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.545709][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.556312][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.617529][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.654095][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.674521][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.686475][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.703064][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.713288][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.720788][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.720805][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.720823][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.720839][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.720858][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.747543][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.769448][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.776844][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.785941][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.795013][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.803922][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.813069][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.821767][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.830457][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.839026][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.846529][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.855512][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.864020][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.872453][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.880956][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.889396][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.896767][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.905894][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.914557][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.923541][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.932553][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.941586][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.950605][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.959066][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.966430][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.974779][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.983230][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1034.991762][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.000195][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.008571][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.015960][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.024402][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.032796][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.041222][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.049614][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.056989][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.064460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.064508][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.076108][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.083511][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.090922][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.098314][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.105695][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.113108][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.120512][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.127925][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.135295][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.142710][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.150116][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.157520][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.164926][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.172343][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.179737][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.187102][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.194525][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.201929][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.209336][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.216720][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.225441][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.232840][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.240248][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.247651][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.255039][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.262443][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.269856][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.277216][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.284615][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.292019][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.299396][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.306764][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.314167][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.321563][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.328957][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.336698][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.344142][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.351529][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.358935][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.366309][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.373709][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.381114][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.388511][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.395882][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.403293][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.410682][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.418079][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.425456][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.432857][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.440249][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.447651][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.455026][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.457451][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.462459][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1035.468140][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.473827][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1035.485445][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.492845][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.500248][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.507651][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.515023][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.522428][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.529822][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.537180][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.544581][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.551981][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.559378][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.566765][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.574199][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.581662][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.589075][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.596462][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.603876][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.611293][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.618727][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.626095][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.633496][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.640929][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.648338][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.655706][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.663111][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.670499][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.677902][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.685269][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.692670][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.700065][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.707461][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.714836][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.722261][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.729664][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.737029][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.744452][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.751862][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.759271][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.766667][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.774088][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.781503][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.788927][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.796302][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.803724][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.811131][T14306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1035.819692][T14306] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1035.849868][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.857297][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.865215][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.872946][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.880670][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.888111][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.895512][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.902953][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.910362][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.917776][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.925158][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.932639][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.940078][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.947515][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.954940][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.962406][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.969856][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.977282][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.984739][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.992328][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1035.999782][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.007183][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.014691][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.022170][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.029633][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.037046][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.044490][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.051934][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.059386][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.066793][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.074249][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.081682][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.089109][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.096514][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.104060][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.111539][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.119016][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.126418][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.133863][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.141335][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.148851][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.156266][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.163784][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.171216][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.178684][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.186088][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.193550][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.200992][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.208520][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.215951][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.223418][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.230871][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.238360][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.245779][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.253224][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.261558][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.268997][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.276729][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.284186][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.291796][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.299222][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.306878][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.314302][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.321719][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.329337][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.336885][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.344335][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.351786][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.359638][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.367049][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.375490][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.382955][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.390405][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.397861][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.405465][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.413190][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.420657][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.428127][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.435821][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.443303][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.450771][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.458238][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.465651][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.474236][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.481664][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.489106][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.496600][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.504039][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.511473][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.518940][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.526333][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.533781][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.541217][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.548669][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.556072][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.563521][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.571048][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.578821][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.586249][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.593821][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.601381][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.608867][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.616556][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.624025][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.631506][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.638970][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.646379][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.653858][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.661302][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.668740][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.676439][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.683949][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.691390][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.698833][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.706509][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.713983][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.721412][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.728875][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.736273][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.743867][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.751293][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.758730][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.766239][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.773704][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.781157][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.788602][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.796004][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.803545][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.810971][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.818412][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.825818][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.833272][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.840722][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.848299][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.855811][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.863259][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.870965][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.878429][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.889015][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.896409][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.903895][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.911327][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.918800][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.926223][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.933694][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.941136][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.948578][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.955984][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.963485][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.970948][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.978402][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.985800][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1036.993264][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.000705][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.008155][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.015569][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.023044][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.030479][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.037935][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.045345][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.053015][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.060492][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.068261][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.075745][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.083204][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.090712][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.098478][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.105899][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.113396][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.120859][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.128298][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.135699][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.143376][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.151002][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.158472][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.165916][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.173357][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.180813][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.188272][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.195705][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.203167][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.210691][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.218165][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.225641][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.233231][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.240678][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.248236][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 14:48:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000400)={0x80, @tick=0x2, 0xffffffffffffffc0, {0x8001, 0x8000}, 0x5, 0x580bdddd1d2c35cb, 0xfffffffffffffff8}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x9}}, 0x23, 0x8}, &(0x7f00000000c0)=0x90) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000380)) clone(0xc020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}, 0x441) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = memfd_create(&(0x7f0000000080)='.\x99?\x97\xe9\x10\n+\xec)\xd8\x9b\x8b\xfc\xbc\x00,b\x10\xff\xff\xff\x1e\xc6\xf3_\x83R\xa1\x00u\x18\x10\xddS\xd4\xd3\x89\xa8!V+$\xf2\x1f\x85j\xa9L\xfd\xa3^\xa6s5\x97Tc\x82L\xa74\xd8\x12_\'\xe7\\\xcaF\x04\xa5V\xc7O\x98\xc8\xef\xfcB\xcd\xbb\xff\xcb\a\xff|`\xb3+', 0x80000000000002) ftruncate(r6, 0x8002) r7 = dup3(r6, r5, 0x0) write$P9_RFSYNC(r7, &(0x7f0000000140)={0x4}, 0xffdf) r8 = openat$cgroup_ro(r7, &(0x7f0000000500)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x7fff, 0x4) getsockname(r4, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x2d0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={r9, @remote, @multicast2}, 0xc) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r9}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="03000000dc120d3cb1f8796400000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="02000800003fe454ea452d583b00a03c000000f72d3b35e7f1ad1b525e58d1619fd9dace2a2d0a1ce3c814df668d8b71983e837fd83b708a9f51f900000073fc799f0451698283d10000000000040000b45b127602b6aa963c000000000000"], 0x80}}, 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000340)='ip6gru0\x00', 0xffffffffffffffde) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000400)={0x80, @tick=0x2, 0xffffffffffffffc0, {0x8001, 0x8000}, 0x5, 0x580bdddd1d2c35cb, 0xfffffffffffffff8}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x8, @loopback, 0x9}}, 0x23, 0x8}, &(0x7f00000000c0)=0x90) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(r10, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffffffffffffffe, @multicast2}, 0x4, 0x4}}, 0x2e) accept(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000000c0)=0x80) 14:48:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x200000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x3f00, 0x0) tkill(r1, 0x14) 14:48:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1037.255640][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.263086][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.270538][T14306] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1037.278901][T14306] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 14:48:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x300000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1037.367197][T23815] QAT: Invalid ioctl 14:48:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x60ff, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1037.400103][T23815] QAT: Invalid ioctl 14:48:14 executing program 4: rt_sigreturn() r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0x4}}}]}, 0x30}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x3ee, {{0x2, 0x4e22, @rand_addr=0x1}}}, 0x88) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r4 = dup3(r2, r3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000400)={0x1, 0x1}) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000000000000000000000000000000000000000000000000000000000009dcf3556acacce17351acaa537bcdc6eb97d965820e7cd93d40e4785ff5b43c56ef134cb85ad66bd3ee348118c2f942a7b749a2e89661a5a8971957151371542d77f5a4e5bc8a05bd229067d30a630d498d5030a27a51a0ef1215d953c2df445be32dbce822be2f22e4ca47101b2326d415d14c3d1f4e774ab4a03ff90488b"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x82) r8 = dup3(r6, r7, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r8, r9, &(0x7f0000000040), 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40405515, &(0x7f0000000380)={0x9, 0x5, 0x64, 0x0, '\x00', 0x10001}) 14:48:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000000)={0x200, 0xfffffffeffffffff, 0x3f, 0x8}, 0x10) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000080)=0xe938) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x1, 0x0, 0x0, {{}, 0x0, 0x3, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 14:48:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7600, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1037.604620][T23812] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1037.645549][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x4000, 0x0) tkill(r1, 0x14) 14:48:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x400000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x9600, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:15 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket(0x2, 0x3, 0x6) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x26}}) [ 1037.933933][T23845] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x34000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x500000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x31e1d, 0x0) tkill(r1, 0x14) 14:48:15 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getsockname$packet(r0, 0x0, &(0x7f00000024c0)) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = syz_open_procfs(r1, &(0x7f0000000040)='autogroup\x00') ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 14:48:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x600000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x102) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000100)={0x7f, 0x556a975b, 0x380000000000, 0x200}) r4 = dup3(r1, r2, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x110, r4, 0x10000000) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e000000520081f8f7000000000000040a4865160b0001000e000068000004000200000040d819a9ffe200000000", 0x2e}], 0x1}, 0x0) 14:48:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1038.364984][T23877] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1038.376510][T23890] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400300, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x1000000, 0x0) tkill(r1, 0x14) 14:48:15 executing program 4: socket(0x2000000000000022, 0x802, 0x1ff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2c4a00, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140)) 14:48:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x700000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x600000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x50f000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1038.747222][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.759422][T23915] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xc000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:15 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4000, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r4 = dup3(r2, r3, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x7) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000080)=0x32c3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3) 14:48:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x707100, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x800000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x2000000, 0x0) tkill(r1, 0x14) [ 1038.947544][T23932] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x70e000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xe000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x717000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xa00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1039.247048][T23959] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x800, 0x3, 0x8}, 0xfffffd81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000180)="75c38f7946650bdf8846b03d465222c95e13577e8e5c3bd66c8e6e29398fe80a0968089b31c4ea7d67aeca3da1b9dba38c3306b65db719590693d8455828021b295b91fcc77c0a17e95acb027f0c57d54bb9b8d32060efd8794bbd3329ac21cd08674fed96af14515a14183706679688b73f54e0ac5a5dc9008c81cf4ce4", &(0x7f0000001580)="2c40a3c99e9a1ae2d97cdb730d19c87b2933ac310636d1e2c60f515dd2a4138d61cd85e175f61d977cac26431137dc3d7b32ad2ee9fa4c8565e7ad3b5afc50cf53add69f50b3255c4f200d7914a84aa4cab66dd3a2bb42aeb3bdc0a06bc03a734602a5cdb32b9dd059b0a3"}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1f, 0x38a2, 0x1729, 0x8, 0x11, r0, 0x400, [], 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x3c) socketpair$unix(0x1, 0x803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001440)='/proc/thread-self/attr/current\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r6, 0x0) connect$unix(r5, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r6, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000014c0)={0x0, @aes256, 0x2, "578795b40ff4db90"}) clone(0x1020000, 0x0, 0x0, 0x0, 0x0) setsockopt(r4, 0x7, 0x8, &(0x7f0000001600)="9a6a54f4b921efd3e8cc103c83cdc0b417c5e63e1fe888dc260da080621af6aa7ef95c3c668f9ea4d3a1339d1832e055e48aed5c68e49aed488102ab4aeb409d67a9d3c3f9eab138d53c60ba9cb776573eb0754265e870112e2e854c7e2715ec4dce0f4ddadbce05b56b762c34a1cafe42219a35dc342689c82e5ce3a33e2280d2e838bd005d87103bcb8c3d0e994c08854e42ef276e09da67102cbcb5be467e16a1ed0522b13dcc5be024c7", 0xac) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet6_udp_int(r8, 0x11, 0x0, &(0x7f0000001480)=0x7, 0x4) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f00000013c0)) r9 = dup3(r3, r5, 0x80000) setsockopt$inet6_tcp_int(r9, 0x6, 0x1b, &(0x7f0000000300)=0x51, 0x4) accept4$unix(r6, 0x0, 0x0, 0x0) ioctl(r5, 0x80000001, &(0x7f00000003c0)="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") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) fcntl$setflags(r6, 0x2, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) fchmod(r6, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000001400), &(0x7f00000000c0)}, 0x20) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000001400)={0x8, 0x20, 0x5, 0x4, 0x52f9}) 14:48:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0xe000000, 0x0) tkill(r1, 0x14) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x760000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x960000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1a020000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1039.551030][T23986] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xe00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x1d1e0300, 0x0) tkill(r1, 0x14) [ 1039.617425][ C1] net_ratelimit: 20 callbacks suppressed [ 1039.617432][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.617457][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.624539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1039.630325][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1039.647415][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:48:16 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x20000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x200000000001f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10602, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @multicast2}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r5, &(0x7f00000003c0)={0x78, 0x0, 0x1, {0x2b, 0x6, 0x0, {0x3, 0x1, 0x4, 0x200, 0xfffffffffffffffe, 0x8, 0x4, 0x731, 0x3, 0x1, 0x9, r7, r8, 0x907, 0xffffffffffffff01}}}, 0x78) r9 = dup3(r3, r0, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r9, r10, &(0x7f0000000040), 0x7) ioctl$VIDIOC_S_AUDIO(r10, 0x40345622, &(0x7f0000000000)={0x3, "0371c068a93a09bf8f7cecdfbc548304784ecab72dea310829b0e05eb63b8763", 0x4}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) dup3(r1, r2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r11) 14:48:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xe07000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1039.710037][T23996] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x1f000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x1000000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1039.949726][T24017] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1039.986474][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf05000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:17 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffeff, 0x40880) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x4, 0x4, 0xfffffffffffff001, 0xb5, 0x401}, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000340), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)={0x1d4, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc22}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x700000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9fdd}]}, @TIPC_NLA_LINK={0xdc, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcaab}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21c7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40000}, 0x2200a004) r7 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x101}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000480)={r8, 0xdf, "b8b4a8ef7a13f114b641046ca55bd908e6870549c323bef9658b5d57928b9780b2bf0062fd60cabcfb197e2156326a5c7fbc0f9a57d47e63710dc12dc093536b2a3ed0e6f9c7401f1fa71f57b4a44a31dbde94f010adac8a71fa7f54bcef34131059a7da7d74fe6f47f0cb86ece450d287f9b671a01940d2d6d9d81f77c1340e20eaea22f87046087846b88a0491023d8fe876c81ef573dc0c239d30591db2966ddcd92c646d7ca38f49eb9bfe828b6d503f9705852af78f3fb1456145fdca756dddcc1209c96f27a3705d08428143db0bcddb698c9309ea55409c82a464b5"}, &(0x7f00000003c0)=0xfffffffffffffd7a) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PPPIOCSCOMPRESS(r10, 0x4010744d) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) read$eventfd(r10, &(0x7f0000000100), 0x8) mount(0x0, 0x0, 0x0, 0x0, 0x0) exit_group(0x3f) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000002300334000000000000035d8b1f711be5d126db3c98d808d8d42ca"], 0x14}}, 0x0) 14:48:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x30020000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1040.279322][T24022] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1040.301382][T24033] Enabling of bearer rejected, failed to enable media 14:48:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x3f000000, 0x0) tkill(r1, 0x14) 14:48:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x2c00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x104, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x80000000a, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = dup3(0xffffffffffffffff, r3, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x7) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x14, 0x0, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xff, 0xa4801) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000080)={r7, r8, 0xd2, 0x3d, &(0x7f0000000040)="daf63744b73ba2f6dc8af5408261fa9af2d297e48162c0b4cde01d5eccad6fa111e3a352f5413400726d522b4d45a31b1898fbc4304efee2d474847907", 0x5, 0x8, 0x1f, 0x6, 0x2, 0x1, 0x7, 'syz1\x00'}) set_tid_address(&(0x7f0000000140)) 14:48:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x34000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1040.657455][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.663299][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1040.669138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1040.674899][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:48:17 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000035) ptrace$peekuser(0x3, r2, 0x245c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000140)={0xf, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init1(0x180400) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x7ffffffffffff010}, {0x6}]}, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) splice(r0, 0x0, r3, 0x0, 0x10001, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0xb49aa6ae1d1fb167) fsync(r5) 14:48:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3300000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x3c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:18 executing program 4: socketpair$unix(0x1, 0x24ccd10b60ae6e2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x2, 0x0, 0x0, @time={0x77359400}}], 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000940)='.dead\x00', &(0x7f0000000980)={'syz', 0x0}, &(0x7f00000009c0), 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)="d0f8af70e73e59624387c6528df84eef5d13ee12f23a3d1fd5944cdc6cc395045614a5b8ae593a1d3ac047977072c95854d3a2a4aac02b4614c555f7a132c84f8f7b12632b7c40f5bdb3e7437c9997efb99e9ab0ff0bb11c3670a12778b3639d6f3fcf3b40a51ec8b7e7d564ca08cc49658bd092e6531c9a458d758a040c55a899fc4046ea5cb8dcde6f295bd7b28bff7b9bbe0123588af2a3f31b1ac8c959f9103935703bf701426ce8f689b011e063d052d6ae", 0xb4}, {&(0x7f0000000500)="8eb73f16ac039854390bd9d8b0", 0xd}, {&(0x7f0000000540)="48555a52ebe550c6a340e677806eb2a8564cbf67d80f94b9701ce5e9b71a578e300a528ac51479830c87d6f9262108b0f72dc889b1522390e6a214411bd63f5fdce797e810f0a2bf47534fa00207c96fe4d4ff7a43329cfe6a5ceb12def2c5f4", 0x60}, {&(0x7f00000005c0)="0ab74f5076fa72093507bd9ab02f7041cc43d1c5610b5c642289321e0342ba6af144d8b34dedb8f4a1eed85464dfc1bf37ef68b1666fc64fa23670677674ede7e3ff84ea415eff932787d7e16c7e09ee81d4be9615894c2a11225bbaab0a1d6cb4bc167aaae2428252081773c727d8a5936041ed4b574501c5d6c4e179b073b8451300e9b8c938d847871f15bdc718b4497b114df4046bcf2b97ddef725d35b1d9215cf114cab0714a521e1d508c13e526060df3a4555f221bf4409036b91af79c53778d610cc416b2c4a7116a9dc75e6f1528006d1dd4be072bdc36dfa848e57abeae84d420137bb3cef0a1b2ec09af0773", 0xf2}, {&(0x7f00000006c0)="5605ad242fc2f17140deb20c7d35278326511cea5ccd449bcb78cf3b57fd51ffe8510bc1d00c7c976552ebec0f143f9a78a3a008ed5a945c8a49b68d84459c29dcdf483b98eca5134d2f3e570f795dd842dc73903c0bc1ca54a69588415604b84280c2f41b2cc5a15ff39d17ebe82cf0d4d14da2ce7060150ee785660a25f5a5adcf480c307a0f1b222df830a6ea", 0x8e}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="18e9519b31f9769d58f8997319eda6e7cda49d7d7f52475bb37fd4feb67fb4773500d3c0b5e576058b110af65ca70afbfcbfb56ebcd8920d6f3f136146737e33332ad434c065ac719e9a423551aac5e97d5293510f80f58cd0bff482fb9d79e9c596e85f917d5603bee0faeb2c209950e907465c9aecc4090597f10d0ec4b7567a7b81584950726b7d991a103a41a8aa1b6720cf61e0f15248ded44a25095abbb8fed50549b8767cd2b12981b64fe3ffe5d5f27d6c7beb75d5d7953d2be4a9b71f6cec1f567fcc3cc26b6570b734a26734fc01cb82a3f60c82b36039bf001b72", 0xe0}], 0x7, r4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r3) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x319) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000780)) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}}], 0x1, 0x0, 0x0) 14:48:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x11000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x40000000, 0x0) tkill(r1, 0x14) [ 1041.034124][T24038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:18 executing program 4: socketpair$unix(0x1, 0x24ccd10b60ae6e2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x2, 0x0, 0x0, @time={0x77359400}}], 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000940)='.dead\x00', &(0x7f0000000980)={'syz', 0x0}, &(0x7f00000009c0), 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)="d0f8af70e73e59624387c6528df84eef5d13ee12f23a3d1fd5944cdc6cc395045614a5b8ae593a1d3ac047977072c95854d3a2a4aac02b4614c555f7a132c84f8f7b12632b7c40f5bdb3e7437c9997efb99e9ab0ff0bb11c3670a12778b3639d6f3fcf3b40a51ec8b7e7d564ca08cc49658bd092e6531c9a458d758a040c55a899fc4046ea5cb8dcde6f295bd7b28bff7b9bbe0123588af2a3f31b1ac8c959f9103935703bf701426ce8f689b011e063d052d6ae", 0xb4}, {&(0x7f0000000500)="8eb73f16ac039854390bd9d8b0", 0xd}, {&(0x7f0000000540)="48555a52ebe550c6a340e677806eb2a8564cbf67d80f94b9701ce5e9b71a578e300a528ac51479830c87d6f9262108b0f72dc889b1522390e6a214411bd63f5fdce797e810f0a2bf47534fa00207c96fe4d4ff7a43329cfe6a5ceb12def2c5f4", 0x60}, {&(0x7f00000005c0)="0ab74f5076fa72093507bd9ab02f7041cc43d1c5610b5c642289321e0342ba6af144d8b34dedb8f4a1eed85464dfc1bf37ef68b1666fc64fa23670677674ede7e3ff84ea415eff932787d7e16c7e09ee81d4be9615894c2a11225bbaab0a1d6cb4bc167aaae2428252081773c727d8a5936041ed4b574501c5d6c4e179b073b8451300e9b8c938d847871f15bdc718b4497b114df4046bcf2b97ddef725d35b1d9215cf114cab0714a521e1d508c13e526060df3a4555f221bf4409036b91af79c53778d610cc416b2c4a7116a9dc75e6f1528006d1dd4be072bdc36dfa848e57abeae84d420137bb3cef0a1b2ec09af0773", 0xf2}, {&(0x7f00000006c0)="5605ad242fc2f17140deb20c7d35278326511cea5ccd449bcb78cf3b57fd51ffe8510bc1d00c7c976552ebec0f143f9a78a3a008ed5a945c8a49b68d84459c29dcdf483b98eca5134d2f3e570f795dd842dc73903c0bc1ca54a69588415604b84280c2f41b2cc5a15ff39d17ebe82cf0d4d14da2ce7060150ee785660a25f5a5adcf480c307a0f1b222df830a6ea", 0x8e}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="18e9519b31f9769d58f8997319eda6e7cda49d7d7f52475bb37fd4feb67fb4773500d3c0b5e576058b110af65ca70afbfcbfb56ebcd8920d6f3f136146737e33332ad434c065ac719e9a423551aac5e97d5293510f80f58cd0bff482fb9d79e9c596e85f917d5603bee0faeb2c209950e907465c9aecc4090597f10d0ec4b7567a7b81584950726b7d991a103a41a8aa1b6720cf61e0f15248ded44a25095abbb8fed50549b8767cd2b12981b64fe3ffe5d5f27d6c7beb75d5d7953d2be4a9b71f6cec1f567fcc3cc26b6570b734a26734fc01cb82a3f60c82b36039bf001b72", 0xe0}], 0x7, r4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r3) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x319) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000780)) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}}], 0x1, 0x0, 0x0) 14:48:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x21000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1041.297424][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:48:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x3f00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x100000000000000, 0x0) tkill(r1, 0x14) 14:48:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x40000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:18 executing program 4: socketpair$unix(0x1, 0x24ccd10b60ae6e2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) write$sndseq(r3, &(0x7f00000000c0)=[{0x0, 0x2, 0x0, 0x0, @time={0x77359400}}], 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000940)='.dead\x00', &(0x7f0000000980)={'syz', 0x0}, &(0x7f00000009c0), 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000400)="d0f8af70e73e59624387c6528df84eef5d13ee12f23a3d1fd5944cdc6cc395045614a5b8ae593a1d3ac047977072c95854d3a2a4aac02b4614c555f7a132c84f8f7b12632b7c40f5bdb3e7437c9997efb99e9ab0ff0bb11c3670a12778b3639d6f3fcf3b40a51ec8b7e7d564ca08cc49658bd092e6531c9a458d758a040c55a899fc4046ea5cb8dcde6f295bd7b28bff7b9bbe0123588af2a3f31b1ac8c959f9103935703bf701426ce8f689b011e063d052d6ae", 0xb4}, {&(0x7f0000000500)="8eb73f16ac039854390bd9d8b0", 0xd}, {&(0x7f0000000540)="48555a52ebe550c6a340e677806eb2a8564cbf67d80f94b9701ce5e9b71a578e300a528ac51479830c87d6f9262108b0f72dc889b1522390e6a214411bd63f5fdce797e810f0a2bf47534fa00207c96fe4d4ff7a43329cfe6a5ceb12def2c5f4", 0x60}, {&(0x7f00000005c0)="0ab74f5076fa72093507bd9ab02f7041cc43d1c5610b5c642289321e0342ba6af144d8b34dedb8f4a1eed85464dfc1bf37ef68b1666fc64fa23670677674ede7e3ff84ea415eff932787d7e16c7e09ee81d4be9615894c2a11225bbaab0a1d6cb4bc167aaae2428252081773c727d8a5936041ed4b574501c5d6c4e179b073b8451300e9b8c938d847871f15bdc718b4497b114df4046bcf2b97ddef725d35b1d9215cf114cab0714a521e1d508c13e526060df3a4555f221bf4409036b91af79c53778d610cc416b2c4a7116a9dc75e6f1528006d1dd4be072bdc36dfa848e57abeae84d420137bb3cef0a1b2ec09af0773", 0xf2}, {&(0x7f00000006c0)="5605ad242fc2f17140deb20c7d35278326511cea5ccd449bcb78cf3b57fd51ffe8510bc1d00c7c976552ebec0f143f9a78a3a008ed5a945c8a49b68d84459c29dcdf483b98eca5134d2f3e570f795dd842dc73903c0bc1ca54a69588415604b84280c2f41b2cc5a15ff39d17ebe82cf0d4d14da2ce7060150ee785660a25f5a5adcf480c307a0f1b222df830a6ea", 0x8e}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="18e9519b31f9769d58f8997319eda6e7cda49d7d7f52475bb37fd4feb67fb4773500d3c0b5e576058b110af65ca70afbfcbfb56ebcd8920d6f3f136146737e33332ad434c065ac719e9a423551aac5e97d5293510f80f58cd0bff482fb9d79e9c596e85f917d5603bee0faeb2c209950e907465c9aecc4090597f10d0ec4b7567a7b81584950726b7d991a103a41a8aa1b6720cf61e0f15248ded44a25095abbb8fed50549b8767cd2b12981b64fe3ffe5d5f27d6c7beb75d5d7953d2be4a9b71f6cec1f567fcc3cc26b6570b734a26734fc01cb82a3f60c82b36039bf001b72", 0xe0}], 0x7, r4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r3) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x319) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000780)) recvmmsg(r1, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}}], 0x1, 0x0, 0x0) 14:48:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4000000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4703000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfeffffff, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x410f0000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x400442, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x0) sendto(r6, &(0x7f0000000180)="3e4228303e4631618a8965dfae58af5b5dee40c6cb113b2981bff11a0fc8e16f16fe28560b8f3f2c6d8c171a4940fa255c6704538b0881cfa8b38770ecd9e09b64faa4297596948ec4ac97a889c90dea201c7b51db91ff2e2bd2f8e4fe540a9d348cc3d2a48d1668ae0c707d913a", 0x6e, 0x0, &(0x7f0000000280)=@sco={0x1f, {0x15b9, 0x200, 0xaf64, 0x8, 0x315b, 0xa}}, 0x80) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000e73000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0xfffffffffffffffe}], 0x1, 0x42, &(0x7f0000000180), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000a00000/0x600000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000a91000/0x1000)=nil, &(0x7f0000e6e000/0x1000)=nil, &(0x7f0000000000)="f92a0fd3fa90712b2a609787b6cd0dde0edea164a9537f8b2629a18386c99872892c1b7c1e587910f8ee5890ed834b6a7d9666", 0x33, r2}, 0x68) 14:48:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xff600000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1041.893342][T24155] input: syz0 as /devices/virtual/input/input23 14:48:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4800000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x200000000000000, 0x0) tkill(r1, 0x14) 14:48:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1042.192105][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x4a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1042.259998][T24164] input: syz0 as /devices/virtual/input/input24 14:48:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0xe00000000000000, 0x0) tkill(r1, 0x14) 14:48:19 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f00000001c0)=0x54) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) 14:48:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2100000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x4c00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x3a4ee17f0000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6800000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1042.645132][T24215] validate_nla: 8 callbacks suppressed [ 1042.645142][T24215] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x50010000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x1d1e030000000000, 0x0) tkill(r1, 0x14) 14:48:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1042.818991][T24229] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x60ffffffffff, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x53020000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x6c00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x760000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x3f00000000000000, 0x0) tkill(r1, 0x14) 14:48:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1043.301002][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1043.322332][T24257] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7400000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7fe14e3a0000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x60000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:20 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffeffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x3ff, 0x0) read(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r12, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, 0x0) r13 = syz_open_dev$radio(&(0x7f0000001680)='/dev/radio#\x00', 0x3, 0x2) r14 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/capi/capi20\x00', 0x222b80, 0x0) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r16, 0xae60) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x82) r17 = dup3(r15, r16, 0x0) r18 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r17, r18, &(0x7f0000000040), 0x7) r19 = accept4$alg(r18, 0x0, 0x0, 0x0) r20 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r20, 0x0, 0x0) r21 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r22 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r22, 0xae01, 0x0) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r24 = ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r24, 0xae60) ioctl$KVM_CREATE_VCPU(r24, 0xae41, 0x82) r25 = dup3(r23, r24, 0x0) r26 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r25, r26, &(0x7f0000000040), 0x7) r27 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r28 = ioctl$KVM_CREATE_VM(r27, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r28, 0xae60) ioctl$KVM_CREATE_VCPU(r28, 0xae41, 0x82) r29 = dup3(r27, r28, 0x0) r30 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r29, r30, &(0x7f0000000040), 0x7) ioctl$VIDIOC_EXPBUF(r25, 0xc0405610, &(0x7f0000001700)={0x7, 0x3ff, 0x81, 0x1800, r29}) r32 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r33 = ioctl$KVM_CREATE_VM(r32, 0xae01, 0x0) r34 = ioctl$KVM_CREATE_VCPU(r33, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r34, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r34, 0x4400ae8f, 0x0) r35 = gettid() ptrace$setopts(0x4206, r35, 0x0, 0x0) tkill(r35, 0x10010000000035) r36 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe8) fsetxattr$system_posix_acl(r36, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{0x2, 0x6}, {}, {0x2, 0x2}, {0x2, 0x4}, {}, {0x2, 0x0, r37}, {0x2, 0x7}, {0x2, 0x6}, {}]}, 0x6c, 0x0) r38 = getegid() r39 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/net/pfkey\x00', 0xd3b1f86058e6e179, 0x0) r40 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r41 = ioctl$KVM_CREATE_VM(r40, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r41, 0xae41, 0x0) r42 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r42, 0xae01, 0x0) r43 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r44 = ioctl$KVM_CREATE_VM(r43, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r44, 0xae41, 0x0) r45 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r46 = ioctl$KVM_CREATE_VM(r45, 0xae01, 0x0) r47 = ioctl$KVM_CREATE_VCPU(r46, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r47, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r47, 0x4400ae8f, 0x0) r48 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r49 = ioctl$KVM_CREATE_VM(r48, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r49, 0xae41, 0x0) r50 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r51 = ioctl$KVM_CREATE_VM(r50, 0xae01, 0x0) r52 = ioctl$KVM_CREATE_VCPU(r51, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r52, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r52, 0x4400ae8f, 0x0) r53 = gettid() ptrace$setopts(0x4206, r53, 0x0, 0x0) tkill(r53, 0x10010000000035) r54 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe8) fsetxattr$system_posix_acl(r54, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{0x2, 0x6}, {}, {0x2, 0x2}, {0x2, 0x4}, {}, {0x2, 0x0, r55}, {0x2, 0x7}, {0x2, 0x6}, {}]}, 0x6c, 0x0) getgid() r56 = gettid() ptrace$setopts(0x4206, r56, 0x0, 0x0) r57 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r58 = ioctl$KVM_CREATE_VM(r57, 0xae01, 0x0) r59 = ioctl$KVM_CREATE_VCPU(r58, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r59, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r59, 0x4400ae8f, 0x0) r60 = fcntl$getown(r59, 0x9) tkill(r60, 0x2000000000003d) r61 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000e40)=0xe8) fsetxattr$system_posix_acl(r61, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{0x2, 0x6}, {}, {0x2, 0x2}, {0x2, 0x4}, {}, {0x2, 0x0, r62}, {0x2, 0x7}, {0x2, 0x6}, {}]}, 0x6c, 0x0) r63 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r64 = ioctl$KVM_CREATE_VM(r63, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r64, 0xae41, 0x0) r65 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r66 = ioctl$KVM_CREATE_VM(r65, 0xae01, 0x0) r67 = ioctl$KVM_CREATE_VCPU(r66, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r67, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r67, 0x4400ae8f, 0x0) r68 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r69 = ioctl$KVM_CREATE_VM(r68, 0xae01, 0x0) r70 = ioctl$KVM_CREATE_VCPU(r69, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r70, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r70, 0x4400ae8f, 0x0) r71 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r72 = ioctl$KVM_CREATE_VM(r71, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r72, 0xae41, 0x0) r73 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer2\x00', 0x24302, 0x0) r74 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r75 = ioctl$KVM_CREATE_VM(r74, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r75, 0xae41, 0x0) r76 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r77 = ioctl$KVM_CREATE_VM(r76, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r77, 0xae60) ioctl$KVM_CREATE_VCPU(r77, 0xae41, 0x82) r78 = dup3(r76, r77, 0x0) r79 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r78, r79, &(0x7f0000000040), 0x7) r80 = accept4$tipc(r78, &(0x7f0000001a00)=@id, &(0x7f0000001a40)=0x10, 0x80000) r81 = gettid() ptrace$setopts(0x4206, r81, 0x0, 0x0) tkill(r81, 0x10010000000035) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a80)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001b80)=0xe8) r83 = getegid() r84 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r85 = ioctl$KVM_CREATE_VM(r84, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r85, 0xae41, 0x0) sendmmsg$unix(r2, &(0x7f0000001c40)=[{&(0x7f0000000080)=@abs={0x3, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)="22c7bb07bc5f867af21e163311539332d9117dc596a9a16eab6d7522a25bd2bb3a62f7562009e5dc20711a635c0a89b4e0fa669a45e29c9577687d4d752683537d50cef1ecd98b2023154ef3de53678f7b9e1135b09e7be652a873cdd7233a7b323ca38cf0f73e995c8ed9bb2909984d58b075458a23202346ca947bdfa41981934a0f51a9e0ba0da13eb5fd3e4ac24da09ee7b62df5a8a8cd0456fd3ed71423fbf3727fe8b4a60ec51d8575d4cd12605e81a2603973397f796f4c92890adda33fc54270cfc9aabeed1e22bf219ff73e5bb2691de72eb6386410005661f51e191becdd01c1fd", 0xe6}], 0x1, 0x0, 0x0, 0x24004001}, {&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000440)="a935af8f612a98797d0e60cb94f49eef4a1597e48f2fdd256f2cf41677b5dcde22e4fb536428c3259b60b2a3cbd5d9880bcdd3be9adfd7ff8c6201d6ff294fdb1952ec345178759e45819e4380804cafc7d2f1e1e89f3b633b55c57337c9e957fb9125640fa963dc910939319111a985c84a98dd5f23408c3cc20b5c57f972c65b0ce9323de3281143", 0x89}, {&(0x7f0000000500)="a985eabab87b4c5a1bbeac4b4791b43537b17985de94e7262ab60189420ce060e1965a7e3062fc674969bd0762aab1d1b895887fed86e23d62ca13a9c9be2349638ce26cb471878ee3de066b7e0ec1cf146c781e5ae3c55693c7af2ecb4bc81e535639ab73b6c63ecbe83d91ee913ae52589265432b0f47e7ccc9d2e35d6fc279cf9f1f30c2d8e42499df8231323e040e15e17ae02c6ce708711a46c7833f41dfafb485396a80c2eda972deaca0e8212789d9437643655b9ca69e428e5ae2abdddbb89d6560b70026863cb08d11e931c08162aed1d723f67048afa0d1f76b7bcc958d2ce331c033fc86cb3ed907203a0ccd7f345", 0xf4}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000380)}], 0x4, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [r3, r4, r0, r5, r6, r7]}}, @rights={{0x28, 0x1, 0x1, [r9, r12, r13, r14, r19, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r20, r21, r0, r22, r31, r34, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r35, r37, r38}}}, @rights={{0x38, 0x1, 0x1, [r39, r41, r1, r42, 0xffffffffffffffff, r44, r47, r49, r1, r52]}}, @rights={{0x14, 0x1, 0x1, [r85]}}, @cred={{0x1c, 0x1, 0x2, {r56, r62}}}], 0x110, 0x40000}, {&(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001940)="2406de9bf150314a8c", 0x9}], 0x1, &(0x7f0000001bc0)=[@rights={{0x38, 0x1, 0x1, [r64, r0, r67, r70, r72, r73, 0xffffffffffffffff, r1, r75, r80]}}, @cred={{0x1c, 0x1, 0x2, {r81, r82, r83}}}], 0x58, 0x48010}], 0x3, 0x2044040) r86 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="dc6e8b76", @ANYRES16=r86, @ANYBLOB="010500000000000000000f000000100007000c0003000000000000000000"], 0x24}}, 0x0) 14:48:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7fffffffefff, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1043.582763][T24271] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x4000000000000000, 0x0) tkill(r1, 0x14) 14:48:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x960000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x7a00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x65580000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x40030000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:21 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) io_uring_enter(r4, 0x8001, 0x3, 0x0, &(0x7f0000000140)={0x100}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82) r5 = dup3(r2, r3, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x414400, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x1}) [ 1044.113886][T24291] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x70710000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x9675090000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) r2 = dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'team_slave_0\x00', 0x200}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) r5 = socket$kcm(0x29, 0xf, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 14:48:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xe0700000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xaa03000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0xffffffff00000000, 0x0) tkill(r1, 0x14) [ 1044.447636][T24322] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf0500000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xe4ffffff00000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1044.610563][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x100000000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1044.778243][T24349] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1044.817485][ C1] net_ratelimit: 18 callbacks suppressed 14:48:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xff00000000000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1044.817496][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.829528][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1044.835334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.841105][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:48:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x200000000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a9119aad5265df5cf1cdd8b43", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="ace8659f062fed2a386199fa5ee56c93", 0x10}], 0x1, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r2, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/176, 0xfffffffffffffe76}], 0x1}}], 0x1, 0x0, 0x0) 14:48:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1044.910416][T24364] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x134, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7f, @rand_addr="899b736262f68316f6aa6fe306b7a954", 0xfffffffffffffff7}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x20}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5a35}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2d4b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36783916}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x5000}, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 14:48:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xffdffe5f00000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x78470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:22 executing program 4: r0 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setresgid(r0, r2, r3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x0, 0x19, &(0x7f00000001c0)='vboxnet0vboxnet0lovmnet0\x00'}, 0x30) r6 = getpgrp(r1) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r4, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x458, 0x3, 0x3, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@typed={0x8, 0x8e, @pid=r5}, @generic="686f2493798c71786af91fa97d9b2cbbaff27899839eb9cd36dad84b420969a2e5254f2a0d14186c6e8b7aed1b43f515ab0adfc4c80c7947978a4683dd76d3b16e35c1d8df6e2919e5cbe3aa91f1d4fa41ae5b28c7ad697d821b1ddb6b341c876eaef625f45d7b28e2ab9d4277f29be35a154141243a9b4afb261c82d6", @nested={0x98, 0xd, [@typed={0xc, 0x6d, @u64=0x9}, @typed={0x18, 0x38, @str='wlan1@-prockeyring\x00'}, @generic="99c38585091cb510a1e9d0f836e108d02a61254185ca3268e08a026ca37e17a01345ff0f3369696b4265042bd2b26f87a64bbc97b0a73a767d8b40424413ce689e7518c9905a942ab2376f6f25f286335e069c72bc85948f2220342d2855d1d17771828c22f1bc1e868eb14d9f6d77"]}, @typed={0x14, 0x34, @ipv6=@loopback}, @nested={0xac, 0x84, [@typed={0x8, 0x5b, @pid=r6}, @typed={0x94, 0xd, @binary="b82ca195d721bc6b0cec370db0beaf9d152f8bd314e46ae796fbe384a4a341c71e04ff9d0c1f5ff8089a33d2f239693c0d73f3bcc3236017152fc7ee24ccbf6b31150800b32152e65020cda1c916aab651631abf3cf89ee5ef1e1cb9c57305fb1026cbb87a0b8b72e103b1dce65260bfab3ae2c4884103cf787e916258c274112bbd9d05f50047eaaa09d05e21"}, @typed={0xc, 0x20, @u64=0xee0}]}, @nested={0x44, 0x3a, [@typed={0x8, 0x83, @uid=r7}, @typed={0xc, 0x84, @u64=0x3f}, @generic="e05cf3b957eff730c7cb6a9d71958d70007d8a98a0f689d2cc7fd7d271043adc21", @typed={0x8, 0x63, @pid=r1}]}, @typed={0xd0, 0x7, @binary="cfa23e0c1f1dc307e55cac2b47ed963636c7cd50871435048f8bf1dae69988e85839f476f909ba11a410fcf0122ebbb43947f5b2b8293ebcd1a6ac198ac3b0bfeae9c76d315922f0f59df0070997a216c307ddfbf5d0ad0e18ce371f4c32c892bc973647aaa7940be37c97e1a81fa33e8719669bd521cdb4063d4c26e2797d4182bb4b846ab6b9ecd7df1d0e98e04589c4e9a0e0c87796f703fb0f4c20b6eca9ff21806ed1793a2f61e830f1f876bdbaad3402c4f941d12273491dae789e91be7e650ed7e6f7558e10bda293"}, @nested={0x150, 0x2c, [@generic="9def06643034d6e0d699b843b2ec113fecb2218373b94d4ffd447d2134962bba0103c6ff59c0743b19e4c7dbdf4aadfc0f2258bdb93fe4efefd66b3574ee947f56de384e38a9b4bdc5791bf0f58b66b3a155d6ac822429a777866bd0c36598e39a7b8471a1237461c05ae00db25fe76d10d3fd1e9c3f897979a0740ba5c5f22aa87be47e9650cfb759dffeb760dc9a46267ef5cfe947f71d90ab1bb1913d90ef68213b23703da73d252586fbcd2968e7d93086901e86f0343e7e6ee482cce9b4c603eace04125a91c49cc132af", @typed={0x4, 0x84}, @generic="0db769594b1aaea4f6f486e48566af0e506c23d4d34f306f0e374acba143ee50dab56fd320721565089f1824ff0406261bb0097d642cbf82fe195e538c2d6b7b7880a3dc5463b50f34e0ac94972c312c82d40e1bc2e37085a2ad363db31ac8fb1399c5a72a4f18458cb6d8c6085611b7c8292d46847687a6"]}]}, 0x458}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r8 = syz_open_dev$vcsa(&(0x7f0000000800)='/dev/vcsa#\x00', 0x0, 0x653c42f2ac569e40) ioctl$EVIOCGABS2F(r8, 0x8018456f, &(0x7f0000000840)=""/177) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/dsp\x00', 0x4000, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40034882}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r10, 0x0, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x2a, @bearer=@l2={'ib', 0x3a, 'erspan0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4048815}, 0x8140) r11 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/video37\x00', 0x2, 0x0) fcntl$getownex(r11, 0x10, &(0x7f0000000ac0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$TUNGETDEVNETNS(r12, 0x54e3, 0x0) r13 = syz_open_dev$dspn(&(0x7f0000000b80)='/dev/dsp#\x00', 0x3d3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r13, 0x80dc5521, &(0x7f0000000bc0)=""/35) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000c00)={0x1, 0x10001, 0x8, 0x40}) r14 = openat$cgroup_ro(r12, &(0x7f0000000c40)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r14, 0x40086432, &(0x7f0000000c80)=0x40) r15 = syz_open_dev$mouse(&(0x7f0000000cc0)='/dev/input/mouse#\x00', 0x7784e56b, 0x0) ioctl$TIOCMBIS(r15, 0x5416, &(0x7f0000000d00)=0x1) lsetxattr$security_capability(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)='security.capability\x00', &(0x7f0000000dc0)=@v2={0x2000000, [{0x4, 0x7}, {0x0, 0x5a}]}, 0x14, 0x5) getegid() r16 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/rtc0\x00', 0x200, 0x0) ioctl(r16, 0x4, &(0x7f0000000e40)="b79a5d33b3b5f71e1fc7014170332372fd515985") 14:48:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400000000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1100000000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1045.291462][T24389] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:22 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0f85403, &(0x7f0000001000)={{0x3}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x10001}, 0x8) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x82) r7 = dup3(r1, r6, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r7, r8, &(0x7f0000000040), 0x7) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000000)={0xcf, 0x7ff, 0x2, 'queue1\x00', 0x3}) 14:48:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xffffffff00000000, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) userfaultfd(0x800) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) write$P9_RLOPEN(r3, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x20, 0x3, 0x1}}}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x5, 0x4) 14:48:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x79470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000000000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1045.457437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.463223][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.663211][T24419] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xff', 0x22000000c0ffffff}) 14:48:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x20000) ioctl(r0, 0xffff7bff00028933, 0x0) 14:48:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8000000000000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0xffffffff94010001, 0x0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x2, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1045.857433][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1045.857460][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.863201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1045.874760][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:48:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x0, @local, 0x4e24, 0x1, 'rr\x00', 0x0, 0x1ff, 0x64}, {@broadcast, 0x4e20, 0x2000, 0x0, 0x1, 0x1}}, 0x44) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000006f020000b901120008000100707070000c00020001000000", @ANYRES32=r1], 0x38}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="3ef95e962a0e3237edaac8082c7e9691b44e236414016d69576c39e21c467bd24358e88f5796a9bf75a6154c8e", 0x2d}, {&(0x7f0000000180)="3ae6962a6ab1267e194f3f32715a1e0c23d4c86d95a76d1dfab867d502f5b45f7f7267f2c6d492b54299c055b8173b0b9ccbc996bcae8b2ba9392aafa792df5033d7d8cabcdde3a16fd35ec729292dbb2b4b42fb73b01a008f9387c86ca8bc51d127cbfcccec689b655272cc2638484d38004d600d20be100e3a63981e7ab37a437648dc68355a1eaf2db143e2eaad33a4262777b3f59fae2355f4f58e75965610afaf1bfebc451b3b11", 0xaa}, {&(0x7f0000000240)="5c6439508751c5f4b0bc0e72f4abdcbffd62f37b4dc298ff", 0x18}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000280)="060789a397485059190c877f40ed1bfe3605f565a9b566777ce3", 0x1a}], 0x5, &(0x7f0000001380)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x18}, 0x40010) 14:48:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfeffffff00000000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7a470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1045.906580][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1046.016247][T24456] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 14:48:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xffefffffff7f0000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r4, &(0x7f0000000080), 0x1b) listen(r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000007c0)={r3, @in6={{0xa, 0x4e24, 0xfffffffffffffff8, @rand_addr="e3dfc3c5e89a5613712adda37bd9e8bb"}}, [0x9, 0x3, 0x6a91, 0x1f, 0x9, 0x9, 0x101, 0x20, 0x7, 0x2ee, 0x2, 0x4, 0x81, 0x8, 0x6]}, &(0x7f0000000080)=0x100) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x200}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000600)=0x84) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = dup3(r7, r8, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r9, r10, &(0x7f0000000040), 0x7) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0x4, @rand_addr="1cfd1cb65ad3d4f1f6da3eb3cc073683", 0x3}}, 0xfffffffffffffff7, 0x7fffffff}, &(0x7f0000000740)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000000780)=@assoc_value={r11, 0x3}, &(0x7f0000002000)=0x8) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r13}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r13, 0x100000000}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) gettid() 14:48:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xff', 0x22000000c0ffffff}) 14:48:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xffffffffff600000, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1046.253612][T24456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:48:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7b470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={r5, 0x5c, "951f78f03b9cc0cee67cd32bdb6a3c2229a9b50ee2c7097d3bd96aab8db585fe12b721294d01c2a61cffbeaf91537822a582e02c1e1bb8330684257eae74337cc03ce2c3f02b75d2c23f482477d55d7dac1f1112651ecf7512001382"}, &(0x7f00000001c0)=0x64) r6 = gettid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r8, 0x4068aea3, &(0x7f00000004c0)={0x74, 0x0, [0x1, 0x9, 0x7, 0x7]}) tkill(r6, 0x14) 14:48:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x3, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1046.413798][T24456] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 14:48:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1046.591821][T24460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 14:48:23 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x39e9c1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x1265, &(0x7f0000000080)={0xffffffff, 0x3}) 14:48:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7c470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd000c040d000d00ea1100000005000000", 0x29}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000080)=0x9, 0x4) 14:48:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x11, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:23 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAMEAT(r0, &(0x7f0000000140)={0x7}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) capget(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000000080)={0x2, 0x10001, 0x9, 0x2, 0x5, 0x3f}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 14:48:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xff', 0x22000000c0ffffff}) 14:48:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7d470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x21, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x4, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:24 executing program 4: sysinfo(&(0x7f0000000000)=""/150) clock_adjtime(0x0, &(0x7f00000003c0)={0x7411a2cf, 0xfffffffffffffffd, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e82}) 14:48:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7e470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) openat(r4, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f00000006c0)="b97a77ccb77d", 0x0, 0x0, 0x0, 0x0, 0x0}) 14:48:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x5, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x200000000000023e, &(0x7f0000000440)=[{0x9, 0x4, 0xa39, 0x7}, {0x7, 0x100000001, 0x1a6, 0x400000000000000}, {0x496, 0x3e325001, 0x4d, 0x8000}, {0x8001, 0x8, 0x3149, 0x2b}, {0x80000001, 0x7, 0x400, 0x2}, {0xed6, 0x2, 0xffffffff7fffffff, 0x5}, {0x2, 0x6, 0x0, 0xd3}, {0x8000, 0x9, 0xffff, 0x1}, {0x45, 0x1, 0x4, 0x8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) timer_create(0x1, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={&(0x7f00000001c0)="f6ba653d9f11b48fbc77a09e66e4a5dfc2c4f4b5e1f2395e2146360ee772b27587adef202b093de0c650706bc892b2faea4610d4f7066327807ec988edfc", &(0x7f00000004c0)="9d0a355ea9407b4cfb59e2ae5dd7ac8f73138b82c0a7c66a1dddeeb9b512da0e133fcdad3fe32302bad35c329446b08063dff8f8933b27e76895af288129a90e9f2cd40318fece00880fab70f136b247f00583efde"}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1100, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x6, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xff', 0x22000000c0ffffff}) 14:48:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x7f470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x60ff, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x7, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x62, &(0x7f0000000240)={@broadcast, @link_local, [], {@ipv4={0x800, {{0x10, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev, {[@rr={0x7, 0x3}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [{[@empty]}, {}]}, @ssrr={0x89, 0x3}, @cipso={0x86, 0x13, 0x0, [{0x0, 0x2}, {0x0, 0x9, "118281cc633299"}, {0x0, 0x2}]}]}}, @icmp=@timestamp_reply}}}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r4, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r5, 0xffff, 0xfffffffffffffff7, 0x3ff, 0x5, 0x3ff}, 0x14) 14:48:24 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000040)={0x0, 0x80805513, 0x70e000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff}) syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x0, 0x0) init_module(0x0, 0x0, &(0x7f0000000540)='-\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x82) r6 = dup3(r4, r5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x82) r9 = dup3(r7, r8, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r9, r10, &(0x7f0000000040), 0x7) ioctl$TCGETX(r10, 0x5432, &(0x7f0000000080)) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r6, r11, &(0x7f0000000040), 0x7) [ 1047.721546][T24578] validate_nla: 8 callbacks suppressed [ 1047.721555][T24578] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x8, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7600, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:25 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x80030000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xa, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x29, 0x829, 0x0, 0x0, {0x3}, [@nested={0xc, 0x100000003, [@typed={0x8, 0x0, @uid}]}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14:48:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x9600, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xe, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:25 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x24) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) listen(r1, 0xffffffff) listen(r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x80000001, 0x2, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8, 0x0, 0x7fff, 0x0, 0x8}, &(0x7f0000000140)=0x98) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x424281) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 14:48:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x34000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x80470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x10, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1048.356040][T24608] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1048.377301][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1048.591670][T24642] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xfd', 0x22000000c0ffffff}) 14:48:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x3, 0x9b9, 0x3}) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000080)=0x40002, 0x4) fcntl$notify(r0, 0x402, 0x6) read(r0, &(0x7f0000000140)=""/165, 0x1000002f9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000100)=0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'batadv0\x00'}, 0x18) 14:48:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400300, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x2c, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000600)='/dev/input/mouse#\x00', 0x4, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000680)=0x839, &(0x7f00000006c0)=0x4) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x82) r7 = dup3(r5, r6, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) sendfile(r7, r8, &(0x7f0000000040), 0x7) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x28800, 0x0) pwrite64(r10, &(0x7f00000004c0)="a67e89440ada64269f65f26d", 0xc, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="fd9c4e198c6400000079ac45727c77ffacd68f44d5ca247567712b8b8e0ca47bf0beb323098e70fcd886efb749830d4e00000000000075ae3682be91a49711d6457d9a519843dfe32c9a74bc44eacbbcc13ff81fc7b3feb0", @ANYRES16=r11, @ANYBLOB="000225bd7000fbdbdf250e00000008000500010000003000010008000500010000000c0007000400000003000000080004004e230000080009001b000000080002003e000000040001000c00010008000400"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="020225bd7000fddbdf250a00000008000600ffffff7f08000400780c00007ea8b413bbad031a1da4c9cf1113424eb3e53e4b1ee345ed3f377935201726499a4fe45b3afe1809d7e27cee1947698b8f41a1d19aa6b8bc0d85775e550e6ee8ece9ab000579fb3c162bb78a5c9f401c34ed0db3cfd1c1be1a301a55b40d92ea6bcf02ff526f1fa688728410b7753cb104bbc3102f8fa3f0ee11183866b701ffdf64d809e22e819df5a8651ce640e3dc3ac3798875d4a43cfb56e46d64e65535d7814b045b925df77c65498b5729a51e52eff227367a4f3124b304c6b2e8cee0931f1434392666347645c5ec11"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) fspick(r10, &(0x7f0000000700)='./file0\x00', 0x1) tkill(r2, 0x14) [ 1049.129387][T24665] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x33, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x81470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x50f000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xc3', 0x22000000c0ffffff}) [ 1049.339748][T24677] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x707100, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x48, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x82470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1049.472297][T24038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x70e000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffebe, 0x0, 0x0, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x79, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) r5 = dup3(r3, r4, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) r7 = msgget(0x3, 0x10) msgctl$IPC_RMID(r7, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x7) sysfs$3(0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x3f, 0x4, 0x8, {0x0, 0x989680}, 0x1, 0x2}) 14:48:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x717000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1049.802351][T24705] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x4c, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xf5', 0x22000000c0ffffff}) 14:48:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x83470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000040)={0x200, 0x40, 0x9, 0x8}) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r5 = gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x760000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1050.017441][ C0] net_ratelimit: 19 callbacks suppressed [ 1050.017449][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.018062][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.023160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.023267][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1050.029373][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1050.034638][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x960000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1050.304528][T24730] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x68, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x84000000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xe07000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) r5 = dup3(r3, r4, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r8, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00'}}}}, 0x3b2}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x22084050}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082bbd7000fedbc1250100000000000000074100000014001800e801007564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x400008d4) r9 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x400, 0x10001) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002780)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r9, 0xc010641d, &(0x7f00000026c0)={0x0, &(0x7f00000025c0)=""/215}) getsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f0000002700), &(0x7f0000002740)=0x4) r10 = fcntl$dupfd(r2, 0x0, r2) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000980)=[{&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/177, 0xb1}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000900)=""/111, 0x6f}], 0x7, &(0x7f0000000a00)=""/184, 0xb8}, 0x32d2}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b00)=""/129, 0x81}, {&(0x7f0000000bc0)=""/122, 0x7a}, {&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000000cc0)=""/181, 0xb5}], 0x4, &(0x7f0000000d80)=""/246, 0xf6}, 0x3}, {{&(0x7f0000000e80)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000fc0)=""/161, 0xa1}], 0x3, &(0x7f00000010c0)=""/128, 0xfffffffa}, 0x1f}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/29, 0x1d}, {&(0x7f0000002180)=""/67, 0x43}, {&(0x7f0000002200)=""/57, 0x39}, {&(0x7f0000002240)=""/173, 0xad}, {&(0x7f0000002300)=""/209, 0xd1}], 0x6, &(0x7f0000002480)=""/39, 0x27}, 0x200}], 0x4, 0x0, 0x0) tkill(r1, 0x14) [ 1050.727449][T24749] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xfe', 0x22000000c0ffffff}) 14:48:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf05000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x6c, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x84470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:28 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x82) r6 = dup3(r4, r5, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r6, r7, &(0x7f0000000040), 0x7) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r7, 0xc040564b, &(0x7f0000000040)={0xd25, 0x0, 0x2025, 0x81, 0x1010000000, {0x401, 0x8}, 0x1}) tkill(r1, 0x14) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r8) 14:48:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x74, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1050.935227][T24038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1050.957953][T24776] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1051.057438][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1051.063260][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1051.069111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1051.074902][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:48:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x85470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:28 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00\xea', 0x22000000c0ffffff}) [ 1051.324797][T24801] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x7a, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x86470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x11000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendto$inet(r1, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x140, 0x8, 0x0, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000001c0)=0x44) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4021fc) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 14:48:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xc0, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x87470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x21000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1051.994712][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:31 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x300, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x87800000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x40000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x404000, 0x0) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000480)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="f3274370d0366ccb52d7c827a9fd7413baabd86f160199ad4414fe6029e354fb8b785ca17524b1cb4f7fe8a0874ef057dfc8cf7ea2caab600547706cfe37576e39d594d82d114b2bb920a84f710f7b6f1d24636f40199522931642122c0fbfb8d086d3ffca3ac307201d004a42f14c4062fa1a16365e50df979b535dc8f6b92227798368918e268adc2cafeb113159e3c5323e5e", 0x94}], 0x1, &(0x7f00000006c0)=[{0xb0, 0x117, 0xe5, "47aa4941417bdb55fae567e26bc11ba448e29821d1637f95b2f8f999eedec928d9cae4195d5f53a3e2d3c52c91f0d80a6be5c87e8b29c3d64fc69c3e52700ec1d39259ec9a7e6aa6cf5315ed542a2c7777994dfb4863ea5eac83405e2c011d045746c7bf0d80153bbbd33b83015ba048b54c902354e487636fd81f341f5a130b0584d2b6463a4fd2ab56420202eee2795a6c3111ce90b57b8b7748"}, {0x70, 0x10a, 0x7, "24ddb7fea0b679e010c29d2c38825b32a5fe7628c771806a4d83616ac0a8ed29696cbb673b4637d862991b45fa296046d982c36e8a0e8e7e61b420dbe65a73045edfbad0ff78856cadfbdc7b9ec0da50b7793fa0e9cf8047166eecb1792f"}, {0xd0, 0x88, 0x2c, "5af6a6a6e19aa952285b863e64fa9652100e46547dc6175bf8da028079380788f2334b5f51a813f999431ce7dcbc48f4c7d25ccb34d797be7d15e652cdb316e7b82be661d09a3ed5cd12415202053c0906592b7022e1ed3fb98652e5eebe7fe626613b6bdd71a92ecf45997a8f76d5c9e1a25921f75cdaccf513737d347c0a450c663b16c30f2822d259629da1c73af404235a497e08b60a5f9cb0623805c74be0dd4bdf2c5747bb4ff180024a6c0753326d63a44eae096d251f263b84"}], 0x1f0}, 0xebe9b4779e75c751) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200003, 0x0) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000002c0)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 14:48:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x347, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1054.340087][T24869] validate_nla: 2 callbacks suppressed [ 1054.340096][T24869] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfeffffff, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x88470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xff600000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1054.602919][T24896] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x3aa, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000803, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x0, 0xd0280) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000080)={{0x4, @name="5c624a439b9de5eaf7ea4648d95939869e6959382c4635eeb023ac304b16b22a"}, 0x8, 0x5c07, 0x2}) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendto$inet(r5, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r6 = gettid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r8 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4000000, 0x480a20) read(r8, 0x0, 0x0) fchdir(r8) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r6, 0x14) [ 1055.217474][ C1] net_ratelimit: 19 callbacks suppressed [ 1055.217480][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.229196][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.237759][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.243505][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.867507][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1055.873339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.257477][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1056.257506][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.263322][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1056.269145][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:48:34 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x88a8ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x500, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x600, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1057.417217][T24038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1057.434733][T24924] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x89470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2100000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x700, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1057.704411][T24938] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:34 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7fff, 0x8, 0x6, 0x2}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3ec) sendto$inet(r1, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r2, 0x13) 14:48:37 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) 14:48:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8a020000}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xa00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x800, 0x718001) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000440)={0x5, 0x70, 0x0, 0x8, 0x6, 0x2, 0x0, 0x20, 0x40000, 0x4, 0x3, 0x7, 0x6, 0xffff, 0x8, 0x6, 0x1, 0x6, 0x100000000, 0x3, 0x10000, 0x1, 0x2, 0x1, 0x6, 0x0, 0x72a1, 0x1, 0x5, 0xfff, 0x4e8a, 0x7fff, 0xfffffffffffffffa, 0xa, 0x100, 0xfffffffffffffff8, 0x7, 0xcd, 0x0, 0x74, 0x0, @perf_config_ext={0xfffffffffffff03f, 0x4}, 0x8000, 0xb, 0x200000000000002, 0x4, 0xfd3, 0xffffffff, 0x6}) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x3a4ee17f0000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1060.417492][ C1] net_ratelimit: 19 callbacks suppressed [ 1060.417527][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.423335][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1060.423381][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.429207][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1060.446346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.476041][T24968] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8a470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0xfffffffffffffcd9}}], 0x4000000000000c0, 0x0, 0x0) tkill(r1, 0x14) [ 1060.714149][T24988] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x60ffffffffff, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1060.755968][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xe00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8b470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1060.901281][T25002] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1061.457462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1061.463280][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1061.469154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1061.474884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1062.097500][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:48:40 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) 14:48:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x760000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x2000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8c470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0xfffffca3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0) r6 = accept(r5, &(0x7f0000000440)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x82) r9 = dup3(r7, r8, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r9, r10, &(0x7f0000000040), 0x7) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f00000006c0)={r4, r0, 0x80000000, 0xac, &(0x7f0000000600)="dfa946db5b459008fea08587ac449ef6898fe28036453fc8682fed83e8b39db385e69ec77ad024a470bd06ce3b92aa595cc694d170031b6b51b2f0004f44eed93161cdac259bf59147fcde42c572011617a4bf5019ac6d0e48119bcbaef856c24c32e76ebf2ad1f7b4cc3712c2d24f2befa14961028bcf6765e62a216a3b7fc3998640227dbf1093fecbff19b4ea18450022a5186a5046aa537d145ce2bff3ccfe79bb33eca051288869aea9", 0xfe, 0x0, 0xffffffffffffffff, 0x401, 0x1, 0x0, 0x2, 'syz1\x00'}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000001c0)=@req={0x0, 0x4, 0x3, 0xfffffffffffffffe}, 0x10) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) [ 1063.552118][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1063.569698][T25019] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x2c00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8d470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7fe14e3a0000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:41 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) 14:48:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7fffffffefff, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1063.855013][T25037] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) write$USERIO_CMD_REGISTER(r3, &(0x7f00000001c0)={0x0, 0x2}, 0x2) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r5 = gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) read(r9, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r9, 0xc0106438, &(0x7f0000000080)={0x6}) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x82) r11 = dup3(r8, r10, 0x0) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r11, r12, &(0x7f0000000040), 0x7) ioctl$EVIOCGEFFECTS(r12, 0x80044584, &(0x7f0000000040)=""/14) tkill(r5, 0x14) 14:48:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x3300, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8e470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x960000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x3f00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x40030000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1064.271925][T25066] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x4000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x8f470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1064.357058][T25066] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x70710000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1064.542035][T25090] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1065.617521][ C1] net_ratelimit: 19 callbacks suppressed [ 1065.617527][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1065.629146][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.634957][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1065.640758][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.257489][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.263549][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.657501][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.657520][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1066.663310][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1066.669060][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:48:44 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x4703, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x90470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xe0700000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) epoll_create1(0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000600)="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", 0xfffffffffffffd59, 0x10000800, 0x0, 0xffffffffffffff37) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) sched_getscheduler(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@empty, @multicast2, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_deladdr={0x68, 0x15, 0x200, 0x70bd2a, 0x25dfdbfd, {0xa, 0xcd1a6b0e730e015c, 0x4, 0x16f, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x80, 0x3ff, 0x0, 0x4}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x49, 0x1000, 0xfff}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10800}, 0x8000) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) tkill(r1, 0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x82) r9 = dup3(r7, r8, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r9, r10, &(0x7f0000000040), 0x7) ioctl$CAPI_CLR_FLAGS(r9, 0x80044325, &(0x7f0000000540)=0x1) [ 1066.995544][T25111] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf0500000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x91470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:44 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x4800, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1067.279270][T25128] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x92470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x200000000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:44 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1067.542235][T25147] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x4c00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x93470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x6800, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1100000000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:45 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x6c00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1068.050220][T25180] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x94470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1068.174319][T25204] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(0x0, 0x14) 14:48:45 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x95470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfeffffff00000000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x7400, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1068.479519][T25222] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xffefffffff7f0000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 14:48:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x96470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) timer_create(0xc, &(0x7f0000cd0000)={0x0, 0x3c, 0x4, @tid=r1}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0xe0000) write$P9_RFLUSH(r3, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 14:48:45 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x7a00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1068.666690][T25247] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x97470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xffffffffff600000, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) [ 1068.759814][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xaa03, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000002, 0x0, r0, 0x0, 0xff2b}]) 14:48:46 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1069.014945][T25261] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xc000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x98470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000003, 0x0, r0, 0x0, 0xff2b}]) [ 1069.302601][T25287] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1070.817485][ C1] net_ratelimit: 19 callbacks suppressed [ 1070.817493][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1070.817520][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1070.823207][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1070.829093][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1070.846201][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:48:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000004, 0x0, r0, 0x0, 0xff2b}]) 14:48:48 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x99470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xff00, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0), 0x1c7145, 0x0, 0x0) tkill(r1, 0x14) 14:48:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1071.680849][T25307] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9a470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0xff2b}]) [ 1071.857494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.863328][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1071.869209][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1071.874988][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:48:49 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000007, 0x0, r0, 0x0, 0xff2b}]) 14:48:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x16000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9b470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0, 0xff2b}]) 14:48:49 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1072.351857][T25344] validate_nla: 1 callbacks suppressed [ 1072.351866][T25344] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x100080000000000b, 0x0, r0, 0x0, 0xff2b}]) [ 1072.497424][ C0] protocol 88fb is buggy, dev hsr_slave_0 14:48:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) clone(0x9100000, &(0x7f0000000040)="e9cfda131596f170a013d220db4bfc4cfbeff617e659ab33f11d2bd911ebcfc7ad7a2d074c3bb2a05b5ea496ad5d1d7dab7b47a76cd5eae2ade3910fb04fcea95fa094babb3c0d402131d69388c2f934ffd5c40360ce89d5685edea5c9c238d6a7", &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000440)="b43e7adf95457892b2d35219148b5fb5dc3ad216816b2a52e097427782d89c63666d6b009c78f49d762ecf2d862390") ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9c470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x52000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x100080000000000c, 0x0, r0, 0x0, 0xff2b}]) 14:48:50 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x10008000000000e0, 0x0, r0, 0x0, 0xff2b}]) 14:48:50 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000300, 0x0, r0, 0x0, 0xff2b}]) 14:48:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x54000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1073.705157][T25382] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1073.743464][ T2821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9d470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x100080000000ffe0, 0x0, r0, 0x0, 0xff2b}]) 14:48:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40001, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[], &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0), &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x59, 0x8}, &(0x7f00000001c0)=0x90) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r10, &(0x7f0000000040), 0x7) bind$isdn_base(r3, &(0x7f0000000040)={0x22, 0xffff, 0x7fffffff, 0x7fffffff, 0x1}, 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r11 = gettid() r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r14, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01f6e700", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r16}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r16, &(0x7f0000000500)=0x4) tkill(r11, 0x14) 14:48:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000020101, 0x0, r0, 0x0, 0xff2b}]) [ 1074.076494][T25412] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:51 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x8fa01, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9e470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x10008000ffffff1f, 0x0, r0, 0x0, 0xff2b}]) [ 1074.299787][T25441] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x97596, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x10008000ffffffe0, 0x0, r0, 0x0, 0xff2b}]) 14:48:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:51 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x2, r0, 0x0, 0xff2b}]) [ 1074.680639][T25460] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x200000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00000004c0)=[{0x200003, 0x0, 0x0, 0x50}]}, 0xfffffffffffffd59) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x82) r7 = dup3(r5, r6, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r7, r8, &(0x7f0000000040), 0x7) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r11, 0x4010aeab, 0x0) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r11) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x82) r13 = dup3(r4, r12, 0x0) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r13, r14, &(0x7f0000000040), 0x7) r15 = socket$netlink(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000000300000058000100100001007564703a73797a300000000044000400200001000a00000000000000ff01000000000000000000000000000000800000200002000a0000000000000000000000000100000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r14, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20084000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, r16, 0x68c, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004048}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) 14:48:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0x9f470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:51 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x4, r0, 0x0, 0xff2b}]) 14:48:52 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x11, r0, 0x0, 0xff2b}]) 14:48:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa0470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1075.102582][T25486] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1075.134479][T25476] Enabling of bearer rejected, failed to enable media 14:48:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x21, r0, 0x0, 0xff2b}]) 14:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x200500, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1075.155965][T14306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:52 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x1100, r0, 0x0, 0xff2b}]) 14:48:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1075.411996][T25507] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x400000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3ff, 0x80000) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00'}, &(0x7f0000000080)=0x54) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r2, 0x14) 14:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x400500, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa1470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x4000, r0, 0x0, 0xff2b}]) 14:48:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:48:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x60ff, r0, 0x0, 0xff2b}]) [ 1075.754632][T25539] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x600100, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa2470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) [ 1076.017441][ C1] net_ratelimit: 17 callbacks suppressed [ 1076.017448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.028915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.034722][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.040496][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1076.057197][T25560] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1076.657461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1076.663294][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.057449][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.057478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1077.063252][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1077.068939][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:48:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x7600, r0, 0x0, 0xff2b}]) 14:48:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x82) r3 = dup3(r1, r2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r3, r4, &(0x7f0000000040), 0x7) write$vhci(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="0458df10d72bfcd558519c9d187cd0e90604cd9316ff4dfcc48dd88d94005184eb3e3ac07213bccae5a8b17ea0f98aeed4a30b0a647de015e7b976adec9040672909c33e29f43dfb292fa70bbc8b25a9ccb22441dd9e9133f0487b0e691008a0b9afd7a495d10bf04547074f09032f6d6c5a3839"], 0x74) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x4fc413f9ee6fabb, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x10000) r5 = gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200200, 0x0) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r5, 0x14) 14:48:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa3470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x800000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:55 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:48:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1078.340002][T25570] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x80ffff, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1078.403512][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 14:48:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa4470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x9600, r0, 0x0, 0xff2b}]) 14:48:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x34000, r0, 0x0, 0xff2b}]) [ 1078.655616][T25593] netlink: 'syz-executor.2': attribute type 43 has an invalid length. 14:48:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0xc00000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:48:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa5470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:48:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 1078.806284][T25609] netlink: 'syz-executor.2': attribute type 43 has an invalid length. [ 1081.217476][ C0] net_ratelimit: 15 callbacks suppressed [ 1081.217485][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.229078][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1081.234964][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1081.240725][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1082.897448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1082.903249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.297482][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.304688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1083.310575][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.316315][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.057494][ C0] net_ratelimit: 6 callbacks suppressed [ 1087.057504][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.068873][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.457471][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.463296][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1087.469184][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1087.474982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.137442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.143244][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.537445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.543250][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.297447][ C0] net_ratelimit: 8 callbacks suppressed [ 1093.297455][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.309235][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.697450][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.703243][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1093.709177][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1093.714913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.377460][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.383264][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.777438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.783243][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1099.537439][ C0] net_ratelimit: 8 callbacks suppressed [ 1099.537447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.548790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1099.937438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.943224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1099.949076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.954813][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1101.617441][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.623230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1102.017469][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1102.023255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.777446][ C0] net_ratelimit: 8 callbacks suppressed [ 1105.777455][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.788787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.177442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.183239][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.189110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.194854][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1107.857437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1107.863233][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1108.257445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1108.263241][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.017496][ C0] net_ratelimit: 8 callbacks suppressed [ 1112.017505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.028880][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.417446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.423249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.429102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1112.435011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1114.097487][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.103317][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1114.497502][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1114.503337][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.257454][ C0] net_ratelimit: 8 callbacks suppressed [ 1118.257463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.268804][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.657440][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.663224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1118.669076][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1118.674811][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.337446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.343232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.737444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.743238][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1124.497463][ C0] net_ratelimit: 8 callbacks suppressed [ 1124.497473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.508930][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1124.897463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.903351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1124.909282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1124.915038][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.577445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.583252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.977448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.983264][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1130.737441][ C0] net_ratelimit: 8 callbacks suppressed [ 1130.737449][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1130.748913][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.137446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.143247][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.149098][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.154840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1132.817442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1132.823247][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1133.217457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1133.223258][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.977448][ C0] net_ratelimit: 8 callbacks suppressed [ 1136.977457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.988800][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1137.377452][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1137.383249][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1137.389111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1137.394847][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:50:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x400000, r0, 0x0, 0xff2b}]) 14:50:08 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x81, 0x8, 0x3994dbb43f2362a4, 0xffffffffffffffff}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x77, 0x2, 0x0, "2730097cb926b8fa6cc33af69d8fea77", "597da98dd530b09aa6d288717d91a318b766ac25195149fd232f46e508ff12713dd38bdc665f8efbc1ffada34285417db1f41399a202f3fdf6850bfc79b5489ba7a9e9424b8d8bfcc48fc9948e2edac9c27e5ca6cf539627c940d2930881a8245578"}, 0x77, 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xffffffff80080000, 0x4) bind$inet6(r1, &(0x7f0000000080), 0x1b) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x5}], 0x2c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0x0, "270a2274179f9507646ca996fa9cce10cce4e0886d9501f11684b86b43044738a761c09cfc08add7d9ef4d2e949aee8d8a116d1f298976a1fce507407676d0a7172416ad721df78b00"}, 0xff6c) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r2, 0x4, 0x80000000002c00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:50:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa6470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:50:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 14:50:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x1000000, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:50:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x9, 0xb3}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x82) r6 = dup3(r4, r5, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x151282, 0x0) sendfile(r6, r7, &(0x7f0000000040), 0x7) ioctl$TCSBRKP(r6, 0x5425, 0x2) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r8 = gettid() r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x18, 0x400000) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, 0x0) tkill(r8, 0x14) 14:50:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x1000194, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 14:50:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {0xa7470100}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_IGMP_VERSION={0x8, 0x2b, 0x2}]}}}]}, 0x3c}}, 0x0) 14:50:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x1fa0800, 0x2e, 0xffffffd5, 0x0, 0x0, 0x94010000}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1153.617408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.623240][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1154.017454][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.023289][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1154.029132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1154.034903][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1155.697476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1155.703272][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1156.097438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.103350][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1159.857449][ C0] net_ratelimit: 8 callbacks suppressed [ 1159.857457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1159.868795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.257447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.263254][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1160.269125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.274864][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1161.937439][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.943232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1162.337445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.343261][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.097438][ C0] net_ratelimit: 8 callbacks suppressed [ 1166.097447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.108803][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.497451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.503248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1166.509109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1166.514845][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.177436][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.183244][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.577439][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.583322][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.337431][ C0] net_ratelimit: 8 callbacks suppressed [ 1172.337440][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.348775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.737443][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.743236][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1172.749106][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1172.754846][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.417437][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.423227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.817443][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.823234][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.577495][ C0] net_ratelimit: 8 callbacks suppressed [ 1178.577505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.589020][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.977512][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.983336][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.989252][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.995001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1180.657483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1180.663305][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.057500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.064528][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.817433][ C0] net_ratelimit: 8 callbacks suppressed [ 1184.817441][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.828775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1185.187341][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1185.193962][ C1] rcu: 1-....: (10558 ticks this GP) idle=172/0/0x3 softirq=116838/116840 fqs=5215 [ 1185.203425][ C1] (t=10500 jiffies g=172109 q=1915) [ 1185.208727][ C1] NMI backtrace for cpu 1 [ 1185.213030][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0-rc8+ #0 [ 1185.220108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.230145][ C1] Call Trace: [ 1185.233403][ C1] [ 1185.236237][ C1] dump_stack+0x172/0x1f0 [ 1185.240545][ C1] nmi_cpu_backtrace.cold+0x70/0xb2 [ 1185.245718][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.251932][ C1] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 1185.257539][ C1] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 1185.263509][ C1] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1185.269377][ C1] rcu_dump_cpu_stacks+0x183/0x1cf [ 1185.274468][ C1] ? find_next_bit+0x107/0x130 [ 1185.279205][ C1] rcu_sched_clock_irq.cold+0x4dd/0xc13 [ 1185.284722][ C1] ? raise_softirq+0x138/0x340 [ 1185.289467][ C1] update_process_times+0x32/0x80 [ 1185.294469][ C1] tick_sched_handle+0xa2/0x190 [ 1185.299293][ C1] tick_sched_timer+0x53/0x140 [ 1185.304036][ C1] __hrtimer_run_queues+0x364/0xe40 [ 1185.309210][ C1] ? tick_sched_do_timer+0x1b0/0x1b0 [ 1185.314471][ C1] ? hrtimer_start_range_ns+0xcb0/0xcb0 [ 1185.319988][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1185.325679][ C1] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 1185.331729][ C1] hrtimer_interrupt+0x314/0x770 [ 1185.336647][ C1] smp_apic_timer_interrupt+0x160/0x610 [ 1185.342170][ C1] apic_timer_interrupt+0xf/0x20 [ 1185.347081][ C1] RIP: 0010:hhf_dequeue+0xab/0xa20 [ 1185.352178][ C1] Code: 42 80 3c 20 00 0f 85 6d 07 00 00 49 8b 1e 48 8d 7b 10 48 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 74 08 3c 03 0f 8e 69 07 00 00 <44> 8b 7b 10 31 ff 44 89 fe e8 47 0b ac fb 45 85 ff 0f 8e 70 04 00 [ 1185.371755][ C1] RSP: 0018:ffff8880ae908de8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1185.380141][ C1] RAX: 0000000000000000 RBX: ffff8880a05a07b8 RCX: ffffffff85c670f9 [ 1185.388105][ C1] RDX: 0000000000000100 RSI: ffffffff85c66afa RDI: ffff8880a05a07c8 [ 1185.396049][ C1] RBP: ffff8880ae908e38 R08: ffff8880a98c6340 R09: 0000000000000000 [ 1185.403993][ C1] R10: fffffbfff134afaf R11: ffff8880a98c6340 R12: dffffc0000000000 [ 1185.411939][ C1] R13: ffff8880a05a04c0 R14: ffff8880a05a0850 R15: ffff8880a05a0850 [ 1185.419889][ C1] ? apic_timer_interrupt+0xa/0x20 [ 1185.424976][ C1] ? hhf_dequeue+0x679/0xa20 [ 1185.429539][ C1] ? hhf_dequeue+0x7a/0xa20 [ 1185.434022][ C1] ? hhf_dequeue+0x7a/0xa20 [ 1185.438511][ C1] __qdisc_run+0x1e7/0x19d0 [ 1185.442991][ C1] ? dev_queue_xmit+0x18/0x20 [ 1185.447645][ C1] __dev_queue_xmit+0x16f1/0x3650 [ 1185.452654][ C1] ? __local_bh_enable_ip+0x15a/0x270 [ 1185.458004][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1185.463265][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1185.469478][ C1] ? br_nf_post_routing+0xd73/0x1d30 [ 1185.474747][ C1] ? br_forward_finish+0x235/0x400 [ 1185.479833][ C1] ? __kasan_check_read+0x11/0x20 [ 1185.484828][ C1] ? __dev_queue_xmit+0x2b15/0x3650 [ 1185.489998][ C1] dev_queue_xmit+0x18/0x20 [ 1185.494474][ C1] ? dev_queue_xmit+0x18/0x20 [ 1185.499133][ C1] br_dev_queue_push_xmit+0x3f3/0x5c0 [ 1185.504479][ C1] ? nf_hook_slow+0xf0/0x1e0 [ 1185.509042][ C1] br_forward_finish+0xfa/0x400 [ 1185.513874][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 1185.519397][ C1] ? br_fdb_add.cold+0x8c/0x8c [ 1185.524137][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1185.529827][ C1] ? nf_hook_slow+0xf0/0x1e0 [ 1185.534393][ C1] __br_forward+0x641/0xb00 [ 1185.538871][ C1] ? br_forward_finish+0x400/0x400 [ 1185.543957][ C1] ? br_dev_queue_push_xmit+0x5c0/0x5c0 [ 1185.549475][ C1] deliver_clone+0x61/0xc0 [ 1185.553862][ C1] maybe_deliver+0x2c7/0x390 [ 1185.558425][ C1] br_flood+0x13a/0x3d0 [ 1185.562560][ C1] br_dev_xmit+0x98c/0x15a0 [ 1185.567039][ C1] ? br_poll_controller+0x10/0x10 [ 1185.572038][ C1] ? rcu_read_unlock+0x5e/0xa0 [ 1185.576774][ C1] ? run_filter+0x4f0/0x4f0 [ 1185.581248][ C1] ? dev_queue_xmit_nit+0x77b/0x990 [ 1185.586419][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.592987][ C1] dev_hard_start_xmit+0x1a3/0x9c0 [ 1185.598073][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.604286][ C1] __dev_queue_xmit+0x2b15/0x3650 [ 1185.609282][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.615495][ C1] ? debug_smp_processor_id+0x3c/0x214 [ 1185.622489][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.628701][ C1] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1185.633963][ C1] ? ip6_finish_output2+0x1034/0x2520 [ 1185.639308][ C1] ? __kasan_check_read+0x11/0x20 [ 1185.644309][ C1] ? lock_downgrade+0x920/0x920 [ 1185.649152][ C1] dev_queue_xmit+0x18/0x20 [ 1185.653629][ C1] ? dev_queue_xmit+0x18/0x20 [ 1185.659232][ C1] neigh_resolve_output+0x5a5/0x970 [ 1185.664404][ C1] ip6_finish_output2+0x1034/0x2520 [ 1185.669581][ C1] ? ip6_mtu+0x2e6/0x460 [ 1185.673884][ C1] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1185.680106][ C1] ? ip6_forward_finish+0x530/0x530 [ 1185.685275][ C1] ? ip6_mtu+0x16f/0x460 [ 1185.689492][ C1] __ip6_finish_output+0x444/0xa50 [ 1185.694586][ C1] ? __ip6_finish_output+0x444/0xa50 [ 1185.699842][ C1] ip6_finish_output+0x38/0x1f0 [ 1185.704664][ C1] ip6_output+0x235/0x7c0 [ 1185.708968][ C1] ? ip6_finish_output+0x1f0/0x1f0 [ 1185.714050][ C1] ? __ip6_finish_output+0xa50/0xa50 [ 1185.719312][ C1] ? ndisc_send_skb+0x803/0x1450 [ 1185.724223][ C1] ndisc_send_skb+0xf29/0x1450 [ 1185.728964][ C1] ? nf_hook.constprop.0+0x560/0x560 [ 1185.734485][ C1] ? memcpy+0x46/0x50 [ 1185.738443][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.744656][ C1] ndisc_send_rs+0x134/0x6d0 [ 1185.749222][ C1] addrconf_rs_timer+0x30f/0x680 [ 1185.754140][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1185.759062][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 1185.763971][ C1] ? lock_acquire+0x190/0x410 [ 1185.768632][ C1] call_timer_fn+0x1ac/0x780 [ 1185.773193][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 1185.778121][ C1] ? msleep_interruptible+0x150/0x150 [ 1185.783466][ C1] ? trace_hardirqs_on+0x67/0x240 [ 1185.788462][ C1] ? __kasan_check_read+0x11/0x20 [ 1185.793460][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 1185.798387][ C1] ? ipv6_get_lladdr+0x490/0x490 [ 1185.803304][ C1] run_timer_softirq+0x697/0x17a0 [ 1185.808320][ C1] ? add_timer+0x930/0x930 [ 1185.812716][ C1] ? kvm_clock_read+0x18/0x30 [ 1185.817379][ C1] ? sched_clock+0x2e/0x50 [ 1185.821772][ C1] ? sched_clock_cpu+0x1b/0x1b0 [ 1185.826600][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.832817][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.839034][ C1] __do_softirq+0x262/0x98c [ 1185.843510][ C1] ? sched_clock_cpu+0x1b/0x1b0 [ 1185.848339][ C1] irq_exit+0x19b/0x1e0 [ 1185.852472][ C1] smp_apic_timer_interrupt+0x1a3/0x610 [ 1185.857990][ C1] apic_timer_interrupt+0xf/0x20 [ 1185.862896][ C1] [ 1185.865819][ C1] RIP: 0010:native_safe_halt+0xe/0x10 [ 1185.871166][ C1] Code: 88 63 6e fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 24 0b 4a 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 14 0b 4a 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 2e 23 22 fa e8 f9 [ 1185.890744][ C1] RSP: 0018:ffff8880a98dfd68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 1185.899136][ C1] RAX: 1ffffffff11a5e8d RBX: ffff8880a98c6340 RCX: 1ffffffff134b5ee [ 1185.907083][ C1] RDX: dffffc0000000000 RSI: ffffffff8177f15e RDI: ffffffff873e150c [ 1185.915114][ C1] RBP: ffff8880a98dfd98 R08: ffff8880a98c6340 R09: ffffed1015318c69 [ 1185.924013][ C1] R10: ffffed1015318c68 R11: ffff8880a98c6347 R12: dffffc0000000000 [ 1185.931956][ C1] R13: ffffffff89a57d78 R14: 0000000000000000 R15: 0000000000000001 [ 1185.939910][ C1] ? trace_hardirqs_on+0x5e/0x240 [ 1185.944905][ C1] ? default_idle+0x1c/0x360 [ 1185.949472][ C1] ? default_idle+0x4e/0x360 [ 1185.954036][ C1] arch_cpu_idle+0xa/0x10 [ 1185.958338][ C1] default_idle_call+0x84/0xb0 [ 1185.963183][ C1] do_idle+0x413/0x760 [ 1185.967250][ C1] ? arch_cpu_idle_exit+0x80/0x80 [ 1185.972258][ C1] cpu_startup_entry+0x1b/0x20 [ 1185.977006][ C1] start_secondary+0x315/0x430 [ 1185.981751][ C1] ? set_cpu_sibling_map+0x2180/0x2180 [ 1185.987196][ C1] secondary_startup_64+0xa4/0xb0 [ 1185.997514][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.003287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.009159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.014948][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1186.897445][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1186.903237][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1188.017499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1188.023375][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.097440][ C0] net_ratelimit: 4 callbacks suppressed [ 1190.097448][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.108787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1190.177486][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1190.183279][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1191.057463][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1191.063270][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1192.177510][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1192.183309][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1192.257505][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1192.263321][ C0] protocol 88fb is buggy, dev hsr_slave_1