7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") [ 1302.214946][T15447] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:55 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 13:59:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x13], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1302.341261][T15467] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 13:59:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xfff) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) readv(r0, &(0x7f0000001800)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/174, 0xae}], 0x2) 13:59:56 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 13:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x14], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r7, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r7, 0x800060c0045005, &(0x7f0000000000)=0x40000) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f764f82f3298816f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c8c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71506911c9bcf8d30b7d7249ac58b107b80b414220e92d0e4112152bbf4ee1ea5a2a96f4b5c5667a3d0a5d562a0a654acf201b146dea3e939744b1a7d84b8e8d84a156bfb7fc20587ee2d700fa30a75cf3444f516300e4f82bd32a537327fd305022"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 13:59:56 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r3, 0x0, 0x1ba, 0x100100002) 13:59:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x60], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:56 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 13:59:56 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x80050000}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 13:59:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf0], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1303.183710][T15989] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) syz_open_dev$sndpcmc(&(0x7f0000000600)='/dev/snd/pcmC#D#c\x00', 0x800, 0x2) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r7, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r7, 0x800060c0045005, &(0x7f0000000000)=0x40000) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r8, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r8, 0x800060c0045005, &(0x7f0000000000)=0x40000) openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x4000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xffdb) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r9}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x1f) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0), 0x0, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r10}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 13:59:56 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x300], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:56 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1303.465261][ T26] audit: type=1326 audit(1567778396.890:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16150 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x80050000 [ 1303.483657][T16166] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x500], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(0xffffffffffffffff, 0x800060c0045005, &(0x7f0000000000)=0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r7}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") [ 1303.835591][T16384] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1304.199786][ T26] audit: type=1326 audit(1567778397.630:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16150 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x80050000 13:59:57 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)) 13:59:57 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 13:59:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x600], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0xffffffffffffffff, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) r4 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x8040) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000000)={0x4, 0x2, 0x4, 0x353b33b8eaae9da5}) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f00000003c0)) accept4$packet(r4, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14, 0x80000) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001700)={r5, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) bind$can_raw(r1, &(0x7f0000002840)={0x1d, r5}, 0x3) setrlimit(0x0, &(0x7f0000000280)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) accept4$x25(r2, &(0x7f0000000040), &(0x7f0000000600)=0x12, 0x1800) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000000780)={0x8, 0x0, 0x2080, {}, [], "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", "ba883d46b44f7289eb188a3f816ae09b1da19cdbed5e691447836e4d3bed1194a374a0bbd250851fd5a5129d1eb344458962cedca100c9350e34d741a727e8d73a19cecbbe93ee1559e899aa4a1bdfab8e87b0ac313204d9bdf27ac6489fa04c26c4f3ad7d00ae835ec5e142f39da1ef75a9b59f24fadff9f8402f55c5908ff2228bfaaa4572d3c462be3669d0c1623681112baa184aa49e5b5d4fdeb9f1363ca6d41b046c330ea09cbd72b2dd6683a1ccaa8d743be16fe6197a928d2959a7db380beff92725ee2153186a308df09b2fdf468c8b2e28b4e29b54dc570058c0bb193268bd45490127e59db751e847854574fde1746cd5fa456647a40465a4da964fa62eb0c6e30bc5bec42cc30fa295a1626d8f23045908cbeaf22d81f37febbb7f2089c8e7ad617e6c160c4ca2994d402842a63570d989adce158fe2bc1e02180170429fb0d220106674fb0484e070135b3a22d323d996cd9da5bf380348e967544780c0ed63bf6d6b1ecc35be59caa58de934aa369e784df0eb863052dcc4bac26249e5497058ac082907635afefcd8f4a2e6db4e518f7c7e7b8b0c203995aae69012c15621fabbaa937851acb500754f1ca786a0b6dc83b843835e3391bcc02ba10eb76c22d7253677561b94322cb83dd08b467bb2d33a4a389c23866daf305cfb793853523434e91906848bbaca93a286ff73afd44bdd84643ff473fd7f27e4d8a8f4900f7ebb0d7f942e55c55a2acee30136393e8ad5b955b66265232383d7b6b7f47d08ad4911cc53315ccc79010f59297ad0b22d58b8b5109229b0e005b1bfa0f998860cf11f1948fbcc7c95788514541a055eaac39e5dd251410e582a9c9981d722956382e528e540a3e3e40608f1226d1e567707f1da6b0823cfee6e192ea406fabbbd4ef30388a5e396224d1d913feae613a667e1e06aae8a43d536f1c26ea46e3c67e9641726d628ffe42431973d44f35bfbb7ae2459c0f14d02263a42ca25874e393b499a8676fbd480326ae04132b14c1bd06665cc1cac23254e44387bd1b84e7735f980a26ce4e8a3304287a69283f8f08f9239f7c075c1f67067be8a6ca7be75e89af6161d5af79e4cd1724de3d500f698369f0dbd87fda09336bedc295c2760deed23854352015202ca6441e61c32ea489eed2353891d87923378166ec3d2d912f66f06f8d9aff6540293330dce92cc7339c31eae9fa712e41eb4c51bfe11236987ca20e1f4d6b0ba982bbc86312b614d7413a9d8c08e9f632692ba091b80d5e31efd270ea2711016b0c06315e083698c6383e644c4e6ae24be6030efbd06240cdbdce4ee8ffb5631711496917e0509058f23502a1f1166396bb2572aa7b3c867d67a5a181abbf290106fec01c3009c2a27cfcad853c08f4394b4c68aa30af924f96dc9271ba8fc19f12a13c92248caf5b1858dc2a57a928ac15549fcb37db39b230b8ba4767637458d0e442b2284422e2c1d5549ae16b8c9eee02aba06ac252c0f8cbba1f0b3b6de64c10458db3062aa168a460cb10231affe449c95385067d461a471ae0e54b02a1832ecc6430faf5d7735637af658d6da2dab87c41c4d4ed9f2cdf27373f9d2e1c820ebfe5a88e6ddbe3e2d8604175a887150203a8ede757219c84406a4398faebd4f0c8abb48d98e992e8f50bf8276c1d551b9fb9ced7588a6ac7eb2c1595e3439127a364d68cac269ae2e26fde825f3cbf3ecb826e287ef2d7464f30d04176f2a8e2076811fbbb94242837ee8082a0cbeb576e7bd814e902eaf74ad6f760eacd4d39fac9e4971da04631c546af1dfeedb5fcf82068a322f0dd75bb5c28a9ec422fe993c57af3561c07dcc7cf1799c72885734cc7a5cc08bc8b294511e2f4822aa2f13db06217d8c92dca967c51602fa16df92bda653665c2bb9f62bf455337437a4d61f8d29e0f90d5965e67004c418e8a29f9485b8f74a548e52be7194a5a74c7a8e5cc412e68479ff8b7971148c089fa5494826ba67d40044817f87571a25ecb3363c6c7927135f3d1bce232ccbc327d4becf5d955bcffda02768ffb5d77855095e888e6960af4cc45a1d5ad33e7de8ff2e794871d1528d8a8f23fdada2be1f87791de4872ffc03d64c2481ac673e02e4973cf75603d9b6695025eff91fdbcc22ca576b260eb21314f439931e9bcc0c05c25cb3c2554db7e952ac4fc122510371f04e880f8fc1525d017ac629c30a77792940ef20160bdc1b95e638e409ade27459f8cc1686e75a938be812ad72ddd771bab6e6ff4576fa5b04c410c12ff4252aa9b505714918e1b87b9ca587dff4c980a08a9d41c4030598fddc5ca84a51262dcec118c7e62368aad800d4295e938776359409ea3ff61135a07c2d27f2f0c9a4fd257889647d5e47503281b907186a89486e8dd34d89b8d1eb2922d457e3f6149a01de0df3d204611a1dc1d5900524dccd7bd6dd42527c3e38ce162db5069dd4fe88022f4e9090ba11943a5835140e3fc207fc59fa49c447dcf05d115b258e0e6f5384d0e49c0746ba0fa865baf52c861d6744e0aeb55f91c7b592f252d4df873b10c47e85bffbe60f509474b5ee44ef2a17300fffbd35b7500f7ede98ed9898f0aa60aad9584e5f997def62f0c762585c16791ba6b597cf40fa5f205947b0761d58ff57da4ada17af6fb5f0af0b53f4adaf3f37a056f03d6d3d27444c01f262bdf83ad2a38580d115ee55f91bd2a95bf9481dd852afd5fcfcf62f1d4c08c29a523bb68676d1d2ba9c6692302109d05c61a478dfe58f3655734587b42d3fbc41a9d5986dcd5be21db75b2ee7ec3f8695a820bad6574760571f8bb1667ddd80b239918ebd62bc5108b8a9e3a33554abe61c244369034fd5123a98ec547d22c7447b2e80236c5986df16001d29d483f94ddecce9df9fe23c2faeb9c57fde10fe8a0facd0a490fb79baae2189d06f3bd30d00848296d0124a8b090dfe3732d475be0c0e9f600c029381dbd1bce61d9bd230d4e801638490c29e8589760e3dbde92dafc73c88cebac98c08d419faec654c73d3d11b55a591332dc3fe30d841b27d444235bfcff8f3b3f1b73466ea4fc37b1ca3ac1851dd7fa015b84ed35ea7fd470253c65fa4bfad4261e50ea3a2fa24797c50393bfcfd702cd77fad27c22446347a116715c1f7c648b2f218cc67a9f7c05dcc46175d70d2f4e0fa14047838136d5457c0e7a1f9bff13857f4b510f90554b547437bcdb373f1f284e5d0d694fff9a80c95ada7e762962544bb52f36de7ac0fb30902cead252a720939d4740ccb97944fbcd9dcb2a444574c6f8f568502eccc05e68a13f60c39b188c54e3ed60d0fd19602b3d12661cd5b1f4365344b401338c5096899a9d04a707239e3180caba9418458b8e6008bd67cae2dee31046a440794f3a8eb3d2d4b90419bc76bcecced8884984fa015a177437d5873e6c686a2a75b7245be8c2daa03013613ffd8e85b6cc70357f2aa2bdf3a93a7b1c4250955a318cde10659577d825c442efce9aa9a97d550911546d887db46349dd7cd783be129519eb617e703b6f0195d19699b597d560618bae2f1a40acf4f0e1f4be26e679d74993a50cfbced2e87110219bca0a7f0fdcaf19e862e8e581715f2df655b5a4c857493371eb8096bcc708033292955e54b76d0299043e2ce3720c0b4936040b40992312312fb64e3fed60c3305b5265d93a3ecd04715f15b6c69849382f42cf6d96cb620fb7307f40b98e35612858f66462cd5f330b060709062b89b06f9870e6e3858c93dba853574adcd4202f454b4659738e6b6e7fab2cb6b36a6a2d9ed0c062e20b35f2c81507b90a5ba3c45aeb6fad251c120af86d5be1d309aab182f54c867db836cca64c30ab6ef820f36056b5555afc023e38657753e1b62361e6e69f0a536a779054ad9770cdf8a4bbc7d17e92197a9cbd9bbeb5604acdce5b8fc2a6e57f63983075c58a2aeb51c92e4c12dfc1959e79230a1fcd1290b269239f1e02cf9c762cb5dad3b7fd93a3914df6dc162466b5980d0aa2238331977f387f59cfca9e6a31d703df7d2b058d321e8b8009caa8cf0154b5358980ed01288bafc69d9605660c1399ad72c42fd848c2a00c1a4815318b621b7c347ff05ca032238986915dafa1ea2ba9944046f83339b4844e84aeafd0d9507f4c5ca32cf2ecffa3b3e798e45206870bf010a4243b67470f0bfd7548180ba4cc5b5afdbe6cd740bb71e947c220b9022bfb8d629dc44ec9d880daf68675ae87992b13cba59c616cbf8134192dc0bb425211ee00de74fbfa306b891bad71fbd82a34d5dd3662cf218f05ca7aec553cedaf2fe56dd9438527f008161012219bd9a040a66d4bf7236fd8e0f0273b065158ce62ace13b6c12a0f417141409fe9a6a3e1d857a7b274f609be60185e535d36c0c480519db5d171ddfbb5b68bd847273f8c06f1fb3b4289852c9ad6fa5bad0379db6a9a278cb22fabfa33cbffdc8f4f92b2ed1e2162dfe777853637b971d0c08d8434c7322ff45808840e393e6a3d0070f2ba04b802e4735052d7196efdf9727805cbd2fd3785552d8dde2b49d65a11c4dc29859ec438e36a495c76f850f488af585d9806ee6c5ddb51e4f387add36c00b222707230d6ccfa0cc16678a621df1eed3f7f7ebd4e1bcb31904c2849c40666f08d5587afc13dcca935d8441a04a00dfe33f2170fabdba912c3ae69ce75d9a4990f2ff188ad68a747685de46eec7d80a5baf9e8e3f677a253e3bec39693eb6c022546304ad52f93ffe7a8e9baa434801beeb7e1f26ef20df2dff7c1292c192117c92d2e826ece9b4b53abf00fdfa380e23abb0e8e2003b78246f3be8d8c4fff4b0575c0bac6a30fd7f4fb2dca3a3c8a128b275736424da8dacca29039427be3c5b74d3f26b6e9f5052df5dc5cdb7af843a212d8daeb9c74ecfc630a84484cca11149be485f281be06ee358b0a10f5e9f01e270a2bef38a50ecbb08fae71ac4bf65763630911a5f54466bfeea5508d0645b791f4a6cb1e10e356ab63863b29d4e4b7724ead8c485609aa1f9148b234c668fbcf993e23312e8b81895ac5d55165c3ae0fd9e584b693c8a640d1755f97995c6f390c35754bf1b4f7d1c43e57661032e27553affac16fb594769bcf4ab80d8be2322d800978364c91a280087727d8cd78c21e0ee587e26a9a8dbc15f8070b1f6ea6c167d5edce1dad55cd09cc7aa88b480e7b80c51e91c685b9a324a219352a19182c81e5d5e58119349a1771dd1e636933d9cb2c4b0c09f22bf5ee6f033f63175503109793e4aabcb9cd23841a07fe359e4e1a6370c90fc3f7bfb787c12735ab3b2797b59d7cf2d2ee121b5aa2a7d60e408ae91267bedb4584225f6ffe307fbe8a9257621a29037ea5292ba6c07fc04a6f94d81a1b70e7fcc5a85cf8b32e9fb6b5aad303b9d63535f3f5ec5a7610efed9994d1218e7b8b0279da4f4d84a9c35bb4fe45425f0878bc2eeda4e15f4abccde269e2017057b21a6f77e61d76534fb16133a1cbc5f20001bdc060d5b1a99ae06ae2eebed5226b25d6bc85a884250bc090d1c9e98f99a618035c31ef9ca01b4f5f2f6fcf7c35377a91c3ba874d20628430f271f7677175854850370f0f1b5b704a6301b178d5cc2a02ee3f4cf1f90d1b4b2548bd393dec00b4542108901a089045d871de32df3855adc8acc705fc42ba432d6e1e1bf30f0281854b06870c2cab6cf6ee3bc57570ed00b94c57e5b433fd6676cc37bb418a7ed6bd64db52c4e8cdfdb14940571f57f95a0105a69e0422d3224a7f758e086d4b0649f0a9c3c4423a9b3b9c55"}) ioctl(r12, 0x6, &(0x7f0000000680)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 13:59:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1304.404473][T16605] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x70e], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)={0x2, 0x0, [{}, {0x80000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}) 13:59:58 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 13:59:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x900], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1304.713772][T16839] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r1, r0, 0x0, 0x9) 13:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xa00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x365, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}, 0xfffffffffffffffe}], 0x4000000000002e4, 0x20010002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 13:59:58 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 13:59:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xb00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1404000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80800) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) ftruncate(0xffffffffffffffff, 0x208200) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) read(0xffffffffffffffff, &(0x7f0000000380)=""/247, 0xf7) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/129, 0x81, 0x0, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) [ 1305.143726][T16972] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xe00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='mounts\x00') read$FUSE(r0, &(0x7f0000000340), 0x1000) syz_open_procfs(0x0, 0x0) 13:59:58 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1305.556890][T17202] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xe07], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:59 executing program 0: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000000340)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x2000000000011, r0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 13:59:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r9, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r9, 0x800060c0045005, &(0x7f0000000000)=0x40000) recvmmsg(r9, &(0x7f00000031c0), 0x0, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x3}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 13:59:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:59 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 13:59:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000007c0)={0x800000000000, 0x20, 0xfffffffffffffffb, 'queue0\x00', 0x9}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, {0x9, 0x6, 0x9, 0x0, 0x6, 0x100, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x4, 0x2, "767f7dea558c25c80c286f746385e270fc9f810ce1f0d844c6d25c8d074eb7f2"}}) fgetxattr(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="000032a62f0057d549066e1d4166438e92639c9295477e4f475b9766189e2f6a6ead468a46c617d05485ce9c2cf46e39dbe7b15f528cb4fae2e3e8530afa87dee4f6e8fc9a2b675969510c1c479377c41c61124bccc86196cdd216ebb1f2749fc28f548de738752adfce064425dd7405b82065600254524a09a48503dc56f19f6874a6c98f08bcb875afa036015fcf2d59ef9ef2a1204b1fb158db62c6e658e6bfa0724518841d5ff9a1601e1e3cc6937e819741c0da934337b4"], &(0x7f00000002c0)=""/117, 0x75) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x10, 0x0, 0x10000101) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r2, &(0x7f00000001c0)=@random={'os2.', 'fuseblk\x00'}, &(0x7f0000000200), 0x0) ioctl(r2, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") accept4(r1, &(0x7f0000000980)=@un=@abs, &(0x7f0000000240)=0x80, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in=@empty, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) geteuid() 13:59:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 13:59:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1100], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1306.049602][T17344] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:59:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1200], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 13:59:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 13:59:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1306.403011][ T26] audit: type=1800 audit(1567778399.830:333): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17445 res=0 13:59:59 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1306.459733][T17567] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:00 executing program 0: fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x400000000e) 14:00:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1300], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1400], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:00 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'team_slave_1\x00', 0x1}, 0x18) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r0 = open(0x0, 0xc0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000480)=0x3, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000000)={@remote}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x2}) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000240)=0x8, 0x4) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2800, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) utimes(&(0x7f0000001500)='./file0\x00', &(0x7f0000002840)={{0x77359400}, {0x0, 0x7530}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000021077a1e8066fab509d9ba6498b12d85000000000000665e7a0c89ba695049213d6501", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf250300000008000300060000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) utime(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x2, 0x3}) pread64(r1, &(0x7f0000000600)=""/56, 0x62b, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x1, 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x1) clock_gettime(0x7, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x180, 0x0) 14:00:00 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x4000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d04000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1306.977749][T17704] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x6000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', r6}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x4000000000001d3, 0x10002, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2000, 0x0) accept$unix(r8, &(0x7f0000000680)=@abs, &(0x7f0000000600)=0x6e) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r7}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1ffffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x34000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:01 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0) 14:00:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x400300], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0xfffffffffffffeb5, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r9, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r9, 0x800060c0045005, &(0x7f0000000000)=0x40000) ioctl$EVIOCGREP(r9, 0x80084503, &(0x7f0000000680)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0xa1, 0x8}, {0x400, 0x4}]}, 0x14, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e3f47ac4bb78cbede75d78d25fe07061d3e63ccc74b91dc1c8a09fadc58e16492c80ce747a742f4df01dc275d8f65b7a481221f3bd465f85e28eda46f10ee1e8a705ef2f4714c15f472a41d5c1a7301ab44d84e92e5f4531a85f797c6441f98fdba3a1395cb2099dc7409946bc48f0275434e1a4261a9356a8e7390fee99d19fcf9f1f3a88006a926d2907b820337cb30533279ba949998fb6f08bc237f03a437fb784fb126b2a42cb2a8e42260360", 0xfffffffffffffe9a, 0x0, 0x0, 0xffffffffffffff37) 14:00:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf0ffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:01 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1308.243306][T18304] validate_nla: 2 callbacks suppressed [ 1308.243315][T18304] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 14:00:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x2000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:02 executing program 0: mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [{}, {}], {}, [{}, {}, {}, {}, {}]}, 0x5c, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) [ 1308.709994][T18540] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b524419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726975a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:02 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x3000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x4000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x5000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1309.279340][T18784] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r3, 0x800060c0045005, &(0x7f0000000000)=0x40000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r3}) connect$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r6}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000640)={'team0\x00', r9}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0xec, &(0x7f0000000cc0)=ANY=[], 0x18}}], 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r8, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r10}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:03 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x6000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1309.761385][T19008] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x8000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:03 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00'}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0xfffffffffffffce7, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8ce17f5d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f05f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d81f3019075b434dbcd014edcc295fe150094737eb186b8b1c04f64d989f427e8fbf102bc9577cee1e1611241f10331f62838335fc2571bbd2f8c6d1180d44f4482d3cf5c287e340bd8676b6259ab041a393df62d010c2d4a3c465abc1e3a7d0ff11c8793ffb86a66aefa0de356160b8424c4d0827eaaacb3430b657c0110af58920f66bdedfd1940f02611133907cfb152bebc9f3c1d91e2eb38732afa2ffb8aa01af7497442a7a484d05eaf7974119ef0b4589b1b5875ca939d40ec4e3d68bcaa861c8a7830266bb9f2d9fce7593c5d7327944111e16ed3f65f95cce02aa38cd0d121cd0b5e75e1c1872b1a5af1b5577c27f61be9bd3123fdbcf74b58bb1d0c6667613baf49d855a1cc6a881c31d172f48d1428ce3241562e29ba3debe240a53f31b2b4081e41f8ac7ff7817612a9ccf9de857de268595dffd53b1c7f12eaa7e27439bbb07957a8a2c54fac35cfaa778f1eace8581b479d23d9f347d03e9910ace9fc1bc0c99440e8"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}]}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x9000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xa000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1310.323489][T19249] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:03 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x366]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xb000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xe000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:04 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) [ 1311.104101][T19609] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xe070000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:04 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1311.428592][T19746] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:05 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1311.800261][T19968] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x10000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x11000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:05 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') r8 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x8040) ioctl$KVM_ASSIGN_DEV_IRQ(r8, 0x4040ae70, &(0x7f0000000000)={0x4, 0x2, 0x4, 0x353b33b8eaae9da5}) ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f00000003c0)) accept4$packet(r8, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001600)=0x14, 0x80000) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000001700)={r9, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r9}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r7}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x12000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1312.275742][T20207] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x13000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:06 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3001]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x14000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1312.670636][T20358] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x40000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x20d, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffc72, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)={0x0, 0x3}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:06 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x60000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x9effffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:07 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1313.627949][T20809] validate_nla: 1 callbacks suppressed [ 1313.627959][T20809] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf0ffffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48d]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xfffff000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:07 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1314.113206][T20945] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:00:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xffffff7f], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:08 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1314.570355][T21171] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xffffff9e], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:00:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xfffffff0], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1314.921265][T21303] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dae0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a8fb6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:08 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6603]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:00:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x40030000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:00:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf0ffffffffffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:09 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1315.929405][T21707] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x100000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:00:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:09 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x200000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:00:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf80]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:00:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x300000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x400000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:10 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x13, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r7, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r7, 0x800060c0045005, &(0x7f0000000000)=0x40000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1316.770727][T22141] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x500000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x600000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:10 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) [ 1317.171626][T22373] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x800000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0x2e1) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x900000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:11 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8087]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1404]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xa00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1317.666753][T22610] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xb00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:11 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e02]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) [ 1318.061690][T22739] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xe00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:11 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) [ 1318.529867][T22939] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xe07000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7f, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:12 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1000000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) [ 1319.134163][T23109] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:00:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1100000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffdd1, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x2db}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x301000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:12 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d04]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:00:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1200000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:13 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0a3]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1300000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:00:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00), 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000680)={0x0, @reserved}) 14:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1319.764135][T23582] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x1400000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:13 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v3, 0x18, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) creat(0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000080)=""/87) 14:00:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x4000000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:13 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0a4]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1320.105778][T23709] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:13 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_transmute(r0, 0x0, 0x0, 0x0, 0x0) 14:00:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x6000000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1320.544509][T23939] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) fsetxattr$security_capability(r6, &(0x7f0000000200)='sty\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x44c, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:14 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0a5]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x9effffff00000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x80050000}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$FIGETBSZ(r0, 0x2, 0x0) 14:00:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) [ 1320.809802][ T26] audit: type=1326 audit(1567778414.240:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24060 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x80050000 14:00:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r9, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r9, 0x800060c0045005, &(0x7f0000000000)=0x40000) ioctl$TCGETS(r9, 0x5401, &(0x7f0000000040)) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000680)=0x6) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 14:00:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xf0ffffff00000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:14 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0a6]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xffffff7f00000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1321.268117][T24297] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:14 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0a7]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0xfffffffffffff000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1321.602159][ T26] audit: type=1326 audit(1567778415.030:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24060 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x80050000 14:00:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) ftruncate(0xffffffffffffffff, 0x208200) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) read(0xffffffffffffffff, &(0x7f0000000380)=""/247, 0xf7) r3 = dup(0xffffffffffffffff) read$rfkill(r3, &(0x7f00000000c0), 0x8) recvfrom$unix(r3, &(0x7f00000002c0)=""/129, 0x81, 0x0, 0x0, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) 14:00:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x95a) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xfffffe91) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x2], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:15 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0a8]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1321.785990][T24544] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x3], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:15 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000100)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="99", 0x1}], 0x1, 0x0) fchmod(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) 14:00:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x4], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x5], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:15 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0a9]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1322.244370][T24783] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:15 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000880)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 14:00:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x6], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:16 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0aa]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:16 executing program 0: r0 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x4) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, 0x0, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRES64], 0x283) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) fallocate(r3, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) 14:00:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x8], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1322.735790][T24916] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x9], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:16 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0ab]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x40) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xfffffffffffffeda) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x4000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xa], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:16 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r0 = geteuid() setreuid(r0, 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000700)='\xd1?\xf3\xd7v,i\xd1\xdd\xb3\x1d%cJ\xfc905\xd4w\xa3\xdaq\xfd\xa1\x9f\xc7..>\x85\x9d\x96d\x87wg\xa7\xbbu\xc4\x18\x14\xd1\x1f\x9b\x87!\x01\xab\xb8\xcf\xe0=\xa6D\v\xc9/\x11\xde\xd13\xcfv9\xf5\x1a\x17\x10\xb8\x1eH\x8c\xb4\x89\'$*\xfa\x0f\x06K\x1e\x16\xa0\xdc\xe9\x947\xb9p\x00\xb4\x7f\xaf\x9706\x7f\xa5\xc2\'\xe4d=\xcd\x95\x97\xdd\xf7*L\x1f\xb9\x90\x88\x16\xc3\xdf\x1e\x13\xf9\xf0$-lB\x9e?\xccO[P\x1b\xf1\xb9yC\xfd7\xa9\xd8\f\x85=ZW\xfd\xd413\xd5\xa5A\xe8\xf4\xce\r\xd9\x95\x890\x82\xc9\a@R\x861U\x00\x80\xb20\xc1\x86\x90\xdd*\xea\x1aV\xeaq\x9a?9+^W\x83\x89yW\x83\xbd\x0e\xbf\x1dy\x85\x0fL\r\x94\xadn\x99\n\x9a\xfa\xa0\xc6<\xca\xedd\x16M', 0x0) 14:00:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1323.439476][T25161] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:17 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0ac]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xb], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2}) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) 14:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xe], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:17 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0ad]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000680)=@short={0xb, @dev, @bcast, 0x1, @rose}, &(0x7f00000006c0)=0x1c, 0x800) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000700)={0x3fc, 0x9, 0x80fff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r3, &(0x7f00000005c0)={0x1d, r5}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r8, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r8, 0x800060c0045005, &(0x7f0000000000)=0x40000) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xfffffffffffffd63) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000640)={'team0\x00', r9}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r10}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r3, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x10], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x13215c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x2a98ef3b) 14:00:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:17 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0ae]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r8, 0x400455c8, 0x1) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)) 14:00:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x11], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1324.479663][T25754] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:18 executing program 0: r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000700), 0x4) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x3ff, @local, 0x1}, 0xfe6f, 0x0}, 0x24004090) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 14:00:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x12], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:18 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0af]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:18 executing program 0: 14:00:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x13], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1325.001354][T25999] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:18 executing program 0: 14:00:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:18 executing program 0: 14:00:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r9, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r9, 0x800060c0045005, &(0x7f0000000000)=0x40000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x361c40531375eeaa, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x14], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14040000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:18 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b0]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:18 executing program 0: [ 1325.426961][T26124] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x60], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:19 executing program 0: 14:00:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf0], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:19 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b1]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1325.879787][T26359] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/913], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = semget$private(0x0, 0x4, 0x400) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/200) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, 0x0, 0x0) socketpair(0x1e, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r1, &(0x7f0000000640)="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", 0x169, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f00000000c0)=""/62, 0x3e}], 0x2}, 0x0) sendto$inet(r1, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$inet6(0xa, 0x88000000000805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r2, 0x18b, 0x10, 0x4, 0x3}, 0x0) 14:00:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x300], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:19 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b2]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) [ 1326.151995][T26476] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x500], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:19 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b3]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x600], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) [ 1326.768044][T26719] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0xc6f5, 0x3}, {0x10000, 0x2}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:20 executing program 0: 14:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800f0000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x70e], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:20 executing program 0: 14:00:20 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b4]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x900], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:20 executing program 0: 14:00:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xa00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:20 executing program 0: 14:00:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r7, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r7, 0x800060c0045005, &(0x7f0000000000)=0x40000) r8 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0x2d2) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r9}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r10}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:20 executing program 0: 14:00:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xb00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:20 executing program 0: 14:00:20 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b5]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:20 executing program 0: [ 1327.449575][T27078] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xe00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:21 executing program 0: 14:00:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d040000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) [ 1327.791637][T27302] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fda1a8e7b907d236e91a85b6e2a13b6b75b558d081f500000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:21 executing program 0: 14:00:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xe07], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:21 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b6]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:21 executing program 0: 14:00:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:21 executing program 0: 14:00:21 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b7]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1ffffff]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1328.262821][T27438] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0x104) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1100], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:22 executing program 0: 14:00:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:22 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b8]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:22 executing program 0: [ 1328.679455][T27669] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1200], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:22 executing program 0: 14:00:22 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0b9]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1300], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r3, &(0x7f00000005c0)={0x1d, r5}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x398}}], 0x1, 0x20050040) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000600)=@v1={0x1000000, [{0x81, 0xd282}]}, 0xc, 0x1) ioctl(r3, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1400], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:22 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0ba]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:22 executing program 0: 14:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:22 executing program 0: 14:00:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x4000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:22 executing program 0: 14:00:23 executing program 0: 14:00:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) [ 1329.736143][T28063] validate_nla: 1 callbacks suppressed [ 1329.736151][T28063] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x6000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:23 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0bb]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:23 executing program 0: 14:00:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:23 executing program 0: [ 1329.988464][T28262] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:23 executing program 0: 14:00:23 executing program 0: 14:00:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:23 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0bc]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x7, 0x101}, {0xfffffffffffffff9, 0x9}]}, 0x14, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:23 executing program 0: 14:00:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x34000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:24 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0bd]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:24 executing program 0: [ 1330.603335][T28510] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x400300], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:24 executing program 0: 14:00:24 executing program 0: 14:00:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf0ffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB], 0x2}}, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000000dc", 0xff0f}], 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) 14:00:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:24 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0be]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:24 executing program 0: 14:00:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:24 executing program 0: [ 1331.290645][T28756] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x2000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:24 executing program 0: 14:00:25 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0bf]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x3000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0xf, &(0x7f0000000280)={0x0, 0xfffffffffffffff8}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745fd1d5ef0f848f15ae5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca74006b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34774f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a9eeca80535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:25 executing program 0: 14:00:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x4000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:25 executing program 0: 14:00:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x5000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1331.932763][T29005] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:25 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0c0]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:25 executing program 0: 14:00:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x6000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:26 executing program 0: 14:00:26 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0c1]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x8000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:26 executing program 0: 14:00:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x9000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1332.640237][T29259] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:26 executing program 0: 14:00:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xa000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:26 executing program 0: 14:00:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5db, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x1, 0x2) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r7, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r7, 0x800060c0045005, &(0x7f0000000000)=0x40000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xffffff2e) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:26 executing program 0: 14:00:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:26 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0c2]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xb000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:26 executing program 0: 14:00:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:26 executing program 0: 14:00:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xe000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1333.515276][T29718] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:27 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0c3]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYRESDEC=0x0], 0x10}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:27 executing program 0: 14:00:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xe070000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:27 executing program 0: 14:00:27 executing program 0: 14:00:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:27 executing program 0: 14:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:27 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r6 = socket(0x2000000000000021, 0x2, 0x7) connect$rxrpc(r6, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc2d, 0x800}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r6, &(0x7f00000005c0)={0x1d, r8}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000640)={'team0\x00', r12}) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000440)=""/118) [ 1333.955393][T29963] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:27 executing program 0: 14:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x10000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:27 executing program 0: 14:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:27 executing program 0: 14:00:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r7, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r7, 0x800060c0045005, &(0x7f0000000000)=0x40000) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xfffffffffffffec9) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r9}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x11000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:27 executing program 0: 14:00:27 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:28 executing program 0: 14:00:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x12000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:28 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe2\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\t\x96\xe3\xea\xfa7R\xe2\xaaU\x98\xe3\x85\xb2\xdf\xc4\x9e!-&\xd9\xff\xe6\xb5<\xddfm\xe7\xe2\x9b\xbb\xd7`\xaf o\"\xea\x9f\xab\xf3\xff\xf9\xf9\xaf\xe2\xa0\x8c\xca\x8c\xdc`\x00\xac\xfd9Lc1\xc1yF\xa8\xa3\x99\xff\x84\x15\xe1K\f\x8dOV%\x81*\x84\xc4\r\xd8\xae\xbe\xfc\x02t\xd0\xf6%\x9b~>\x87j\x00^K\xfb\x17\x81\x0ff\xb4\x93\xfd\xb1\xf8\xe4\xd2\xf7]\xaa\x8bX.\x1b]=\x8c\x17\xbe\x11\xff\xcd\xc10\xd3F8\x0f\xe0\x1b\x1a\xb13\xdb\x8a\xee,\xc3\x1c\xban~u\xdf\xc9-\xd9E\x8e', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) [ 1334.756565][T30382] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x13000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r8}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:28 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x14000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:28 executing program 0: syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe800000000000000000000000000000ff02000000000000000000000000000100004e20004d9078e29607149378d33e1db1c73936e77aa3f7fac33b042bd36823686253193decb1c373d6ea51369e92fb96cc7c6fe44d1fcafff87429e50b32881721afab69cc3712c37ed0"], 0x0) 14:00:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:00:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd17}, 0x48) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r3, &(0x7f00000005c0)={0x1d, r5}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000640)={'team0\x00', r8}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) 14:00:28 executing program 0: r0 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x4) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, 0x0, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRES64], 0x283) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000002) fallocate(r3, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) [ 1335.323910][T30598] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:28 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x40000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x60000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:29 executing program 0: 14:00:29 executing program 0: 14:00:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x9effffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1336.100217][T31086] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdaf9e8b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e05000000005dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312948669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a9a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f17256e7e1a2e793cc3d6955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92db21dbcc7ab627cab25aacb8afeb78750635ce134b2aeae1fc652229db6b97fcfcbbce3d319c9dbfc4eabb9cd36ce43d59645d5928bb9d18d20ef1c8a7fb734d75bf46d672e48e3f02a7c9f2436a4900a0b3fd1878d39fa9e936c9cd3018eadd10ded0909258bf98d35ffdfa17eaf72c0183d3dd581924693afd11023c85ea076873657a8d2d4697d84992083d42b8918ddd299daf1d434f03ee742e6916b960e6a"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='securipabilipy\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200}, {0x10000}], r8}, 0x8f85c7ca2dd51bf2, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r2, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1404000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 14:00:29 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf0ffffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:29 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 14:00:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xfffff000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:30 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1336.607756][T31268] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xffffff7f], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='\xfd\x04\xfcu\x90e\xf4\xfep', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r2, &(0x7f00000005c0)={0x1d, r4}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xffd0) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', r7}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/703], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000000)=@v1={0x1000000, [{0x9, 0x81}]}, 0xc, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r8 = eventfd(0xe33) ioctl(r8, 0x101, &(0x7f0000000840)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766020cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d200ed0699c5acf514c819034b9280a988f5333a0e709a428da30000ea949f6acb810194fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1ababd236a7bfa53141410677c13f793076915cd9483d0") 14:00:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xffffff9e], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1337.028008][T31464] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:30 executing program 0: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x12, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000740)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xbe\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xd7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5R\xf4RF\xf2>Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x90\xb3\xe3\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\xa5\x03\xf7\xaf\xb0\x1d@p5\x9c|\xd3\xdc\xa8\x025\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7!w\xda\xd3H\x06c)\xb4\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc,T\xbeA\xe3\x15E\x15:f0\"\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90') getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 14:00:30 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xfffffff0], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) clone(0x208007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1f) getpgrp(0x0) 14:00:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000007c0)={0x400, 0x9, 0xfff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f00000001c0)={0x1, 0x9, 0x200, 0x6}) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000c20000/0x1000)=nil, 0x2000) accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14, 0x800) bind$can_raw(r1, &(0x7f00000005c0)={0x1d, r3}, 0x10) setrlimit(0x0, &(0x7f0000000280)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/btrfs-control\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) sysfs$1(0x1, &(0x7f0000000140)='/dev/admmidi#\x00') ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000640)={'team0\x00', r6}) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e406d58937e7e899e0524843c9577ff71e0071d71fb1d3a901077798b490b4a76907477a209528adca7e5454b7de5cc94628348a24593c5dbdf200796a8fd217367c017f76f131c0900500000000000000707d2c35d0d74fdf1ae8c6a87859044d43c33745b812f77b26ae3208e5809f51528f2436610c52bf24993141a5cb6c0a9c3dca0a16787a4d0c82e2d9829219e3d981000000000650a4058a8e4347e13f94be6d87fc7ecdafb88b1a03b8d9e4eac3f0076580f6e76aec101fc935e5cb5fac970f73d3fe7d1f036c1e5b40464269b3a1071a96f3d5fdf7a8e7b907d236e91a85b6e2a13b6b5eb558d081f5b2244a7c0069b224b8000000000000f4ffffff00000000000000000000000055bf174404ac8265c12f697031e6df417b8ce13b188e0a11d30e0535e81b9a5dae69dba40f81de8fc5493ec0bf3203923a2838ca68206b5c494a6d8e745f5e60ab1305a691c1600ecc53f4491e299cb565c68f7616f312958669da2e6a4cb8a1d2a4536fce6053903c8e0045d45c55174647a894e8a741efefd2655481509786214a098a93e188e34748afb6903a167217c2efde1f63f0b03674f51a4de823ccca928b1118c60b1600d89026b1978600000000000000000000000075ebc13438f037d6baf9f8830b239b31d59789c3c5cca9d4ef1c028d3917331edeca33cc77f157df04dfabaaf41bbbe0b90d21810b5c4419b7d3a1a80ae7682e4a96a980535b17d093ab7907106b20e47fe7d4c99f825bf49ec8e09f0d78b87e8719f1726955a249b7c482b564f6a7e3be40ad3628874918fef11727eba39da2d6b4f493bdac5316d4c386867e192214bb092978d265c80a6b51b299da428cda58d07c95c78b77f0a098d1039dfe46bec85161cdaab6025c574bca71b80b414220e92d"], 0x18}}], 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000740)=0x14) socket$inet(0x2, 0xa, 0x20) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000440)=""/118) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000500)=0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x200000, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0xf000000, 0x0, 0x0, 0x0, 0x78}}], 0x371, 0x10002, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000200)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x200, 0x3}, {0x10000, 0x5}], r7}, 0x18, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl(r1, 0x6, &(0x7f0000000940)="11dca50d5e0bcfe47bf070930419f9054fb19545c10a53a358ac7f7b9db60400994766f30cf9706504fd12f31063c43cab54c3b790a6efe4b52d234cbe346ba0707444d4194da8d1d2a4ed0699c5acf514c819034b9280a988f5333a0e7091428da30000ea949f6acb81fe94fd11cbd0384db0c1acbc9ea8a6707876c2f684e8be4dc8d57e6220df1aa1bd236a1410677c13f793076915cd9483d0f173e9ca") 14:00:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x40030000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1337.535383][T31696] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d04000000000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:31 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf0ffffffffffff], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) 14:00:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x3}, 0x18) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0xc020660b, &(0x7f0000000000)) 14:00:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x100000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x200000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:31 executing program 3: 14:00:31 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1ffffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:31 executing program 0: 14:00:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x300000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:31 executing program 0: 14:00:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000), 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a40)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, 0x0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0xbe14941ad78a9916) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @empty}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000), 0x20) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040), 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) 14:00:32 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) [ 1338.559058][T32071] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x400000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:32 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30010000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x500000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000004c0)={@rand_addr=0x5, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'team_slave_1\x00', 0x1}, 0x18) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r1 = open(0x0, 0xc0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000280)=0x100000000000000, 0x4) openat$full(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/full\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000400)={0x6, 0xfff, 0x53a, 0x4, 0x0, 0x8}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000480)=0x3, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000000)={@remote}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x2}) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000240)=0x8, 0x4) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x2800, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) utimes(&(0x7f0000001500)='./file0\x00', &(0x7f0000002840)={{0x77359400}, {0x0, 0x7530}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000021077a1e8066fab509d9ba6498b12d85000000000000665e7a0c89ba695049213d6501", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf2503000000080003000600"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x1, 0x2) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000540)='y\x00', 0x2, 0x1) open(&(0x7f0000000200)='./file0\x00', 0x1410a3, 0xe0) clock_gettime(0x7, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x230, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x180, 0x0) 14:00:32 executing program 0: 14:00:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x600000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1338.992424][T32429] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 1, id = 0 14:00:32 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:32 executing program 0: 14:00:32 executing program 0: 14:00:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x800000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:32 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1339.409672][T32662] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:32 executing program 3: 14:00:32 executing program 0: 14:00:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x900000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:33 executing program 0: 14:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:33 executing program 3: 14:00:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xa00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:33 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:33 executing program 0: 14:00:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xb00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:33 executing program 3: 14:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1339.875813][ T331] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:33 executing program 0: 14:00:33 executing program 3: 14:00:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xe00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:33 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:33 executing program 3: 14:00:33 executing program 0: 14:00:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xe07000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:33 executing program 3: 14:00:33 executing program 0: 14:00:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1340.290459][ T466] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:33 executing program 3: 14:00:33 executing program 0: 14:00:33 executing program 3: 14:00:33 executing program 0: 14:00:34 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66030000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf00000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:34 executing program 3: 14:00:34 executing program 0: 14:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:34 executing program 3: [ 1340.804667][ T610] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:34 executing program 0: 14:00:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1000000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:34 executing program 3: 14:00:34 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:34 executing program 0: 14:00:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1100000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:34 executing program 0: 14:00:34 executing program 3: 14:00:34 executing program 0: 14:00:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1341.239106][ T742] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:34 executing program 0: 14:00:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1200000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:34 executing program 3: 14:00:34 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:34 executing program 0: 14:00:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1300000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:35 executing program 3: 14:00:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:35 executing program 0: 14:00:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x1400000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:35 executing program 0: 14:00:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:35 executing program 3: [ 1341.785374][ T996] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:35 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:35 executing program 0: 14:00:35 executing program 3: 14:00:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x4000000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:35 executing program 0: 14:00:35 executing program 3: 14:00:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x6000000000000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1342.128281][ T1133] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:35 executing program 0: 14:00:35 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x9effffff00000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:35 executing program 0: 14:00:35 executing program 3: 14:00:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000140)=""/11, 0xdd) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)) clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, 0x0) 14:00:36 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r0, 0x0, 0x0) 14:00:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xf0ffffff00000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:36 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87800000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xffffff7f00000000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:36 executing program 0: connect$unix(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB="820201f0ffffffff"], 0x1) r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x100000000000000a, &(0x7f0000000040)='\x00', 0x1) dup2(r1, r0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) [ 1342.745965][ T1395] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000200)=@in={0x2, 0x4e22, @local}, 0x80) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="3321206064d4be5ec7702f71fe29255b25205c0a99f77c50a21b7dd0993e581e2390cc3e8b7bdfee42cdc5a1ab60c6bfd28ca690edd7a993b1fd3730eeb70219c03f695804e5198b58cbf3e020f9f1477c8b16083d8b0dc129b05c13a9ac78ffae252b05db92ecb1e5bbe8ad16678be0a517fefc21fdddada600bc7bcb69b099bfa63568a81a625fd7efb653132b6c622de80ac08099"], 0x96) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe2\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\t\x96\xe3\xea\xfa7R\xe2\xaaU\x98\xe3\x85\xb2\xdf\xc4\x9e!-&\xd9\xff\xe6\xb5<\xddfm\xe7\xe2\x9b\xbb\xd7`\xaf o\"\xea\x9f\xab\xf3\xff\xf9\xf9\xaf\xe2\xa0\x8c\xca\x8c\xdc`\x00\xac\xfd9Lc1\xc1yF\xa8\xa3\x99\xff\x84\x15\xe1K\f\x8dOV%\x81*\x84\xc4\r\xd8\xae\xbe\xfc\x02t\xd0\xf6%\x9b~>\x87j\x00^K\xfb\x17\x81\x0ff\xb4\x93\xfd\xb1\xf8\xe4\xd2\xf7]\xaa\x8bX.\x1b]=\x8c\x17\xbe\x11\xff\xcd\xc10\xd3F8\x0f\xe0\x1b\x1a\xb13\xdb\x8a\xee,\xc3\x1c\xban~u\xdf\xc9-\xd9E\x8e', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000080)) bind$bt_l2cap(r0, &(0x7f0000000040), 0xe) 14:00:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0xfffffffffffff000], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1343.071068][ T1636] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:37 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e02]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:37 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e020000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x2], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)={0x3, 0x0, [{0xd}, {0x7}, {0x1}]}) 14:00:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x3], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1343.886076][ T1760] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:37 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:37 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1344.200478][ T1976] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:37 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e02]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x4], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x5], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:38 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3c17, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe172, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000000)="1f0000000a0afffffd3b000007110600f30500030b000500020423ca0000cf", 0x1f) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000]}, 0xd}, 0x80, 0x0}, 0x0) [ 1344.638069][ T2330] IPVS: ftp: loaded support on port[0] = 21 14:00:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x6], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:38 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1344.890764][ T2354] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:38 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e02]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48d]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1345.042039][ T2346] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 14:00:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x9], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:38 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1345.402918][ T2597] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:38 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xa], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:38 executing program 3: socket$kcm(0xa, 0x2, 0x11) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x206040, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000100)=0xfffffffffffffff7) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000000)=0x40000) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r4, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r4, 0x800060c0045005, &(0x7f0000000000)=0x40000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r6, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r6, 0x800060c0045005, &(0x7f0000000000)=0x40000) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000200)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) kcmp(r5, r7, 0x5, r8, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@rc={0x1f, {0x3, 0x100000001, 0xaa, 0x23b8, 0xfffffffffffffffc, 0xfffffffffffeffff}}, 0x80, 0x0}, 0x48044) 14:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:39 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xb], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:39 executing program 3: socket$kcm(0xa, 0x2, 0x11) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x206040, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000100)=0xfffffffffffffff7) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000000)=0x40000) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r4, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r4, 0x800060c0045005, &(0x7f0000000000)=0x40000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r6, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r6, 0x800060c0045005, &(0x7f0000000000)=0x40000) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000200)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) kcmp(r5, r7, 0x5, r8, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@rc={0x1f, {0x3, 0x100000001, 0xaa, 0x23b8, 0xfffffffffffffffc, 0xfffffffffffeffff}}, 0x80, 0x0}, 0x48044) 14:00:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xe], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:39 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:39 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1346.031989][ T2960] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:39 executing program 3: socket$kcm(0xa, 0x2, 0x11) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x206040, 0x0) ioctl$int_in(r3, 0x0, &(0x7f0000000100)=0xfffffffffffffff7) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000000)=0x40000) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r4, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r4, 0x800060c0045005, &(0x7f0000000000)=0x40000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r6, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r6, 0x800060c0045005, &(0x7f0000000000)=0x40000) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000200)=0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) kcmp(r5, r7, 0x5, r8, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@rc={0x1f, {0x3, 0x100000001, 0xaa, 0x23b8, 0xfffffffffffffffc, 0xfffffffffffeffff}}, 0x80, 0x0}, 0x48044) 14:00:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xf], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:39 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:39 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x10], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1346.414617][ T3223] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:39 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0xbdc0010000000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x11], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x12], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:40 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0xbdc0010000000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:40 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:40 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1346.934513][ T3498] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf80]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x13], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:40 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0xbdc0010000000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:40 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaac00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x14], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1347.360589][ T3752] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:40 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x60], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:41 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabc00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1347.996938][ T4089] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:41 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xf0], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:41 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1404]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:41 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacc00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x300], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:42 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xadc00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1348.608273][ T4439] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:42 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:42 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x500], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x600], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:42 executing program 0: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1349.031541][ T4679] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:42 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaec00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:42 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x70e], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:42 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:42 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xafc00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0x900], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1349.551529][ T4927] FAULT_INJECTION: forcing a failure. [ 1349.551529][ T4927] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.588922][ T4927] CPU: 0 PID: 4927 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 1349.596762][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.596768][ T4927] Call Trace: [ 1349.596788][ T4927] dump_stack+0x172/0x1f0 [ 1349.596810][ T4927] should_fail.cold+0xa/0x15 [ 1349.596826][ T4927] ? release_sock+0x156/0x1c0 [ 1349.596843][ T4927] ? fault_create_debugfs_attr+0x180/0x180 [ 1349.596858][ T4927] ? page_to_nid.part.0+0x20/0x20 [ 1349.596871][ T4927] ? ___might_sleep+0x163/0x280 [ 1349.596891][ T4927] __should_failslab+0x121/0x190 [ 1349.629553][ T4927] should_failslab+0x9/0x14 [ 1349.629568][ T4927] kmem_cache_alloc_node+0x268/0x740 [ 1349.629590][ T4927] __alloc_skb+0xd5/0x5e0 [ 1349.629604][ T4927] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1349.629622][ T4927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.629636][ T4927] ? netlink_autobind.isra.0+0x228/0x310 [ 1349.629654][ T4927] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 1349.639493][ T4927] netlink_sendmsg+0x972/0xd60 [ 1349.648905][ T4927] ? netlink_unicast+0x710/0x710 [ 1349.648920][ T4927] ? aa_sock_msg_perm.isra.0+0xba/0x170 14:00:43 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1349.648936][ T4927] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1349.648952][ T4927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.648964][ T4927] ? security_socket_sendmsg+0x8d/0xc0 [ 1349.648980][ T4927] ? netlink_unicast+0x710/0x710 [ 1349.658572][ T4927] sock_sendmsg+0xd7/0x130 [ 1349.658588][ T4927] ___sys_sendmsg+0x803/0x920 [ 1349.658604][ T4927] ? copy_msghdr_from_user+0x440/0x440 [ 1349.658622][ T4927] ? __fget+0xa3/0x560 [ 1349.658637][ T4927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.658670][ T4927] ? __fget+0x384/0x560 [ 1349.670005][ T4927] ? ksys_dup3+0x3e0/0x3e0 [ 1349.670027][ T4927] ? __fget_light+0x1a9/0x230 [ 1349.681861][ T4927] ? __fdget+0x1b/0x20 [ 1349.681875][ T4927] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1349.681894][ T4927] __sys_sendmsg+0x105/0x1d0 [ 1349.681910][ T4927] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1349.681931][ T4927] ? switch_fpu_return+0x1fa/0x4f0 [ 1349.681947][ T4927] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1349.681970][ T4927] __x64_sys_sendmsg+0x78/0xb0 [ 1349.691629][ T4927] do_syscall_64+0xfd/0x6a0 14:00:43 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) [ 1349.691657][ T4927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.702993][ T4927] RIP: 0033:0x459879 [ 1349.703008][ T4927] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1349.703014][ T4927] RSP: 002b:00007f25c2a5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.714676][ T4927] RAX: ffffffffffffffda RBX: 00007f25c2a5dc90 RCX: 0000000000459879 [ 1349.714684][ T4927] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1349.714692][ T4927] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1349.714700][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c2a5e6d4 [ 1349.714706][ T4927] R13: 00000000004c77c2 R14: 00000000004dd018 R15: 0000000000000005 14:00:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xa00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1349.910504][ T5044] FAULT_INJECTION: forcing a failure. [ 1349.910504][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.003999][ T5044] CPU: 0 PID: 5044 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 1350.011846][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.021899][ T5044] Call Trace: [ 1350.025196][ T5044] dump_stack+0x172/0x1f0 [ 1350.029533][ T5044] should_fail.cold+0xa/0x15 [ 1350.034128][ T5044] ? __kasan_check_read+0x11/0x20 [ 1350.039164][ T5044] ? fault_create_debugfs_attr+0x180/0x180 [ 1350.044969][ T5044] ? page_to_nid.part.0+0x20/0x20 14:00:43 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1350.050039][ T5044] ? ___might_sleep+0x163/0x280 [ 1350.054892][ T5044] __should_failslab+0x121/0x190 [ 1350.059833][ T5044] should_failslab+0x9/0x14 [ 1350.064348][ T5044] kmem_cache_alloc_node_trace+0x274/0x750 [ 1350.070162][ T5044] ? kasan_unpoison_shadow+0x35/0x50 [ 1350.075446][ T5044] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1350.081257][ T5044] __kmalloc_node_track_caller+0x3d/0x70 [ 1350.086888][ T5044] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1350.092266][ T5044] __alloc_skb+0x10b/0x5e0 [ 1350.096687][ T5044] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1350.101802][ T5044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.108040][ T5044] ? netlink_autobind.isra.0+0x228/0x310 [ 1350.113675][ T5044] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 1350.119916][ T5044] netlink_sendmsg+0x972/0xd60 [ 1350.124674][ T5044] ? netlink_unicast+0x710/0x710 [ 1350.129604][ T5044] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1350.135154][ T5044] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1350.140613][ T5044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.146850][ T5044] ? security_socket_sendmsg+0x8d/0xc0 [ 1350.146865][ T5044] ? netlink_unicast+0x710/0x710 [ 1350.146882][ T5044] sock_sendmsg+0xd7/0x130 [ 1350.146896][ T5044] ___sys_sendmsg+0x803/0x920 [ 1350.146914][ T5044] ? copy_msghdr_from_user+0x440/0x440 [ 1350.171770][ T5044] ? __fget+0xa3/0x560 [ 1350.175840][ T5044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.182083][ T5044] ? __fget+0x384/0x560 [ 1350.186247][ T5044] ? ksys_dup3+0x3e0/0x3e0 [ 1350.190669][ T5044] ? __fget_light+0x1a9/0x230 [ 1350.195343][ T5044] ? __fdget+0x1b/0x20 [ 1350.199414][ T5044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1350.205663][ T5044] __sys_sendmsg+0x105/0x1d0 [ 1350.210258][ T5044] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1350.215295][ T5044] ? switch_fpu_return+0x1fa/0x4f0 [ 1350.220407][ T5044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1350.226476][ T5044] __x64_sys_sendmsg+0x78/0xb0 [ 1350.231245][ T5044] do_syscall_64+0xfd/0x6a0 [ 1350.231265][ T5044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.231284][ T5044] RIP: 0033:0x459879 [ 1350.245518][ T5044] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.265229][ T5044] RSP: 002b:00007f25c2a5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.265243][ T5044] RAX: ffffffffffffffda RBX: 00007f25c2a5dc90 RCX: 0000000000459879 [ 1350.265251][ T5044] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1350.265258][ T5044] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 14:00:43 executing program 3: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) 14:00:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:43 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) [ 1350.265266][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c2a5e6d4 [ 1350.265273][ T5044] R13: 00000000004c77c2 R14: 00000000004dd018 R15: 0000000000000005 [ 1350.384722][ T5167] FAULT_INJECTION: forcing a failure. [ 1350.384722][ T5167] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.397602][ T5167] CPU: 0 PID: 5167 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 1350.405405][ T5167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.415450][ T5167] Call Trace: [ 1350.415468][ T5167] dump_stack+0x172/0x1f0 [ 1350.415491][ T5167] should_fail.cold+0xa/0x15 [ 1350.427657][ T5167] ? fault_create_debugfs_attr+0x180/0x180 14:00:43 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1350.433469][ T5167] ? __lockdep_free_key_range+0x120/0x120 [ 1350.439196][ T5167] __should_failslab+0x121/0x190 [ 1350.444135][ T5167] should_failslab+0x9/0x14 [ 1350.448636][ T5167] kmem_cache_alloc+0x47/0x710 [ 1350.453399][ T5167] ? lock_acquire+0x190/0x410 [ 1350.458073][ T5167] ? netlink_deliver_tap+0x146/0xbf0 [ 1350.463368][ T5167] skb_clone+0x154/0x3d0 [ 1350.467618][ T5167] netlink_deliver_tap+0x94d/0xbf0 [ 1350.472730][ T5167] netlink_unicast+0x5a2/0x710 [ 1350.477501][ T5167] ? netlink_attachskb+0x7c0/0x7c0 [ 1350.482611][ T5167] ? _copy_from_iter_full+0x25d/0x8a0 [ 1350.487984][ T5167] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1350.493707][ T5167] ? __check_object_size+0x3d/0x437 [ 1350.498905][ T5167] netlink_sendmsg+0x8a5/0xd60 [ 1350.503670][ T5167] ? netlink_unicast+0x710/0x710 [ 1350.503685][ T5167] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1350.503706][ T5167] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1350.514159][ T5167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.514173][ T5167] ? security_socket_sendmsg+0x8d/0xc0 [ 1350.514185][ T5167] ? netlink_unicast+0x710/0x710 [ 1350.514206][ T5167] sock_sendmsg+0xd7/0x130 [ 1350.525863][ T5167] ___sys_sendmsg+0x803/0x920 [ 1350.525881][ T5167] ? copy_msghdr_from_user+0x440/0x440 [ 1350.525898][ T5167] ? __fget+0xa3/0x560 [ 1350.525919][ T5167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.536268][ T5167] ? __fget+0x384/0x560 [ 1350.536286][ T5167] ? ksys_dup3+0x3e0/0x3e0 [ 1350.536306][ T5167] ? __fget_light+0x1a9/0x230 [ 1350.536320][ T5167] ? __fdget+0x1b/0x20 [ 1350.536336][ T5167] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1350.536353][ T5167] __sys_sendmsg+0x105/0x1d0 [ 1350.536368][ T5167] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1350.536391][ T5167] ? switch_fpu_return+0x1fa/0x4f0 [ 1350.536415][ T5167] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1350.545483][ T5167] __x64_sys_sendmsg+0x78/0xb0 [ 1350.545502][ T5167] do_syscall_64+0xfd/0x6a0 [ 1350.545521][ T5167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.620547][ T5167] RIP: 0033:0x459879 [ 1350.624419][ T5167] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.644002][ T5167] RSP: 002b:00007f25c2a5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.652390][ T5167] RAX: ffffffffffffffda RBX: 00007f25c2a5dc90 RCX: 0000000000459879 [ 1350.660352][ T5167] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1350.668302][ T5167] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1350.676257][ T5167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c2a5e6d4 [ 1350.684229][ T5167] R13: 00000000004c77c2 R14: 00000000004dd018 R15: 0000000000000005 14:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d04]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) 14:00:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xb00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:44 executing program 0 (fault-call:3 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:44 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1350.965421][ T5388] validate_nla: 1 callbacks suppressed [ 1350.965429][ T5388] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x200) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={[{@gid={'gid'}}, {@nointegrity='nointegrity'}, {@discard='discard'}, {@nodiscard='nodiscard'}, {@discard_size={'discard'}}]}) 14:00:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xe00], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) [ 1351.051621][ T5394] FAULT_INJECTION: forcing a failure. [ 1351.051621][ T5394] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.088737][ T5394] CPU: 1 PID: 5394 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 1351.096566][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.106611][ T5394] Call Trace: [ 1351.109912][ T5394] dump_stack+0x172/0x1f0 [ 1351.114258][ T5394] should_fail.cold+0xa/0x15 [ 1351.118860][ T5394] ? __lockdep_free_key_range+0x120/0x120 [ 1351.124586][ T5394] ? fault_create_debugfs_attr+0x180/0x180 [ 1351.130402][ T5394] ? page_to_nid.part.0+0x20/0x20 [ 1351.130423][ T5394] ? ___might_sleep+0x163/0x280 [ 1351.140274][ T5394] __should_failslab+0x121/0x190 [ 1351.145217][ T5394] should_failslab+0x9/0x14 14:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1351.149726][ T5394] kmem_cache_alloc_node_trace+0x274/0x750 [ 1351.155533][ T5394] ? refcount_sub_and_test_checked+0x154/0x200 [ 1351.161693][ T5394] ? lock_downgrade+0x920/0x920 [ 1351.166627][ T5394] __kmalloc_node+0x3d/0x70 [ 1351.171121][ T5394] qdisc_alloc+0xbb/0xa90 [ 1351.175437][ T5394] ? do_raw_read_unlock+0x3f/0x70 [ 1351.180455][ T5394] ? _raw_read_unlock+0x2d/0x50 [ 1351.180472][ T5394] qdisc_create+0xec/0x1210 [ 1351.180488][ T5394] ? nla_memcpy+0xb0/0xb0 [ 1351.180503][ T5394] ? tc_get_qdisc+0xc10/0xc10 [ 1351.180527][ T5394] tc_modify_qdisc+0x524/0x1c50 [ 1351.189837][ T5394] ? qdisc_create+0x1210/0x1210 [ 1351.189864][ T5394] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1351.189882][ T5394] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1351.189895][ T5394] ? qdisc_create+0x1210/0x1210 [ 1351.189917][ T5394] rtnetlink_rcv_msg+0x463/0xb00 [ 1351.229597][ T5394] ? rtnetlink_put_metrics+0x580/0x580 [ 1351.229614][ T5394] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1351.229631][ T5394] ? __copy_skb_header+0x250/0x550 [ 1351.229652][ T5394] netlink_rcv_skb+0x177/0x450 [ 1351.229667][ T5394] ? rtnetlink_put_metrics+0x580/0x580 [ 1351.229679][ T5394] ? netlink_ack+0xb30/0xb30 [ 1351.229698][ T5394] ? netlink_deliver_tap+0x254/0xbf0 [ 1351.240405][ T5394] rtnetlink_rcv+0x1d/0x30 [ 1351.240422][ T5394] netlink_unicast+0x531/0x710 [ 1351.240439][ T5394] ? netlink_attachskb+0x7c0/0x7c0 [ 1351.240454][ T5394] ? _copy_from_iter_full+0x25d/0x8a0 [ 1351.240470][ T5394] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1351.240491][ T5394] ? __check_object_size+0x3d/0x437 [ 1351.296090][ T5394] netlink_sendmsg+0x8a5/0xd60 [ 1351.300836][ T5394] ? netlink_unicast+0x710/0x710 [ 1351.305764][ T5394] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1351.311311][ T5394] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1351.316770][ T5394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.323038][ T5394] ? security_socket_sendmsg+0x8d/0xc0 [ 1351.328520][ T5394] ? netlink_unicast+0x710/0x710 [ 1351.333461][ T5394] sock_sendmsg+0xd7/0x130 [ 1351.337878][ T5394] ___sys_sendmsg+0x803/0x920 [ 1351.342551][ T5394] ? copy_msghdr_from_user+0x440/0x440 [ 1351.348001][ T5394] ? __fget+0xa3/0x560 [ 1351.352065][ T5394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.358281][ T5394] ? __fget+0x384/0x560 [ 1351.362430][ T5394] ? ksys_dup3+0x3e0/0x3e0 [ 1351.366854][ T5394] ? __fget_light+0x1a9/0x230 [ 1351.371517][ T5394] ? __fdget+0x1b/0x20 [ 1351.375581][ T5394] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1351.381810][ T5394] __sys_sendmsg+0x105/0x1d0 [ 1351.386377][ T5394] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1351.391389][ T5394] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1351.397433][ T5394] __x64_sys_sendmsg+0x78/0xb0 [ 1351.402193][ T5394] do_syscall_64+0xfd/0x6a0 [ 1351.407220][ T5394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1351.413116][ T5394] RIP: 0033:0x459879 [ 1351.416990][ T5394] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1351.436579][ T5394] RSP: 002b:00007f25c2a5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1351.444988][ T5394] RAX: ffffffffffffffda RBX: 00007f25c2a5dc90 RCX: 0000000000459879 14:00:44 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 14:00:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1351.452937][ T5394] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1351.460883][ T5394] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1351.468838][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c2a5e6d4 [ 1351.476801][ T5394] R13: 00000000004c77c2 R14: 00000000004dd018 R15: 0000000000000005 14:00:44 executing program 0 (fault-call:3 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x8}}}]}, 0x58}}, 0x0) 14:00:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@migrate={0xc8, 0x21, 0x811, 0x0, 0x0, {{@in, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@ipv4={[0x0, 0x0, 0xe07], [], @multicast2}, @in6=@rand_addr="25d5d6da2487a7d096b03326105152e0"}, {@in=@loopback, @in=@broadcast}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@broadcast}}]}, 0xc8}}, 0x0) 14:00:45 executing program 1: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r0 = creat(0x0, 0x0) r1 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r1, 0x9) getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="724b7b83676fcc419ecf4ac7de57316643b9cb2e8b7183e5918aef469f14025552bc79394a2ad88cad6170139063a0e60f1714f036baaa2e1b7d3247045c70aa0ea9191636e1fcccfa9cf2a6b4c96753e5f6ee8b6f0de93e5828495012e4a806b009528a558c75703b4a4f80d2a65440fd281d461a5f86860f3e92e6aab169758ecf70d492aec4a403199a312f1cf573b1ba758dee2756c4294276a39e3d116978aab03eb9719ce180d5009e90ccdd8ff62cbfcfa863e901e92ac71f76af00f6571113e66d1a2489e1e1c0bd0d4f97f18acfdbba3f1fac78cc2e1054ab7ebb56203aac7a4742efd30963e98798b3fad5391eca25b1553e68e801a0e28825077e72445b210618ef9ccc6cd4d097ae0b289ed1613677077d46533c1d2d09f16df9d51276267111893baa308f7ec5abd607dc44446b1903bef82ca0e7d7214958600249d12ceb661f265973caa1b3e4ed736b4830857bf6595c6d0d4ac96f72461a774778935436ef3539f325cfd72d24452dc74f61acfd4df8febf7c7809fbc599ee77abcd998e1676a1c865b15efeb02ff59fa01f21b891269130dd3bfd9d7eb0e0185ed2be12b4c05a2d0a37ee"], 0x0) getpid() getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3c00100]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) prctl$PR_SET_ENDIAN(0x14, 0x9efce89ea5a4cd0b) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x4, 0x8001, 0x0, 0x10001, 0x14, 0x3, 0xb1b1, 0x332, 0x6, 0x800000000000000, 0x6, 0x4}) [ 1351.602065][ T5573] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:00:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5ffe) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x6, 0x7583, 0x9, 0x2, 0x15eea46c, 0x0, 0x1f, 0x9, 0x6, 0x4, 0x4, 0x101, 0xfc, 0x5, 0x4f], 0x0, 0x16000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000005c0)="b86b0000000f23d80f21f835000000900f23f866baf80cb88f72b98def66bafc0cec66c0a0313a000000c4c3d15c1ff30f350f01c3c4e24d96390f009c6a05000000c4c249af4d57b8340000000f23d00f21f8353000000c0f23f8", 0x5b}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1351.737597][ T5640] FAULT_INJECTION: forcing a failure. [ 1351.737597][ T5640] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.774174][ T5640] CPU: 0 PID: 5640 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 1351.782011][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.792063][ T5640] Call Trace: [ 1351.795358][ T5640] dump_stack+0x172/0x1f0 [ 1351.795381][ T5640] should_fail.cold+0xa/0x15 [ 1351.804274][ T5640] ? qdisc_alloc+0xbb/0xa90 [ 1351.804295][ T5640] ? fault_create_debugfs_attr+0x180/0x180 [ 1351.814571][ T5640] ? page_to_nid.part.0+0x20/0x20 [ 1351.819592][ T5640] ? ___might_sleep+0x163/0x280 [ 1351.824438][ T5640] __should_failslab+0x121/0x190 [ 1351.829376][ T5640] should_failslab+0x9/0x14 [ 1351.833872][ T5640] kmem_cache_alloc_trace+0x2d3/0x790 [ 1351.839233][ T5640] ? fault_create_debugfs_attr+0x180/0x180 [ 1351.845019][ T5640] ? page_to_nid.part.0+0x20/0x20 [ 1351.850029][ T5640] tcf_block_get_ext+0x882/0x1610 [ 1351.855038][ T5640] tcf_block_get+0xb9/0x100 [ 1351.859523][ T5640] ? tcf_block_get_ext+0x1610/0x1610 [ 1351.864788][ T5640] ? walker_check_empty+0x70/0x70 [ 1351.869795][ T5640] ? lockdep_init_map+0x1be/0x6d0 [ 1351.874924][ T5640] ? dsmark_dump.cold+0x40/0x40 [ 1351.879768][ T5640] ? __kasan_check_write+0x14/0x20 [ 1351.884868][ T5640] sfb_init+0x36/0xa7 [ 1351.888834][ T5640] ? sfb_change+0xe90/0xe90 [ 1351.893320][ T5640] qdisc_create+0x4ee/0x1210 [ 1351.897893][ T5640] ? tc_get_qdisc+0xc10/0xc10 [ 1351.902587][ T5640] tc_modify_qdisc+0x524/0x1c50 [ 1351.907426][ T5640] ? qdisc_create+0x1210/0x1210 [ 1351.912277][ T5640] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1351.917371][ T5640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1351.923591][ T5640] ? qdisc_create+0x1210/0x1210 [ 1351.928438][ T5640] rtnetlink_rcv_msg+0x463/0xb00 [ 1351.933360][ T5640] ? rtnetlink_put_metrics+0x580/0x580 [ 1351.938802][ T5640] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1351.944069][ T5640] ? __copy_skb_header+0x250/0x550 [ 1351.949164][ T5640] netlink_rcv_skb+0x177/0x450 [ 1351.953908][ T5640] ? rtnetlink_put_metrics+0x580/0x580 [ 1351.959345][ T5640] ? netlink_ack+0xb30/0xb30 [ 1351.963934][ T5640] ? netlink_deliver_tap+0x254/0xbf0 [ 1351.969212][ T5640] rtnetlink_rcv+0x1d/0x30 [ 1351.973607][ T5640] netlink_unicast+0x531/0x710 [ 1351.978355][ T5640] ? netlink_attachskb+0x7c0/0x7c0 [ 1351.983460][ T5640] ? _copy_from_iter_full+0x25d/0x8a0 [ 1351.988814][ T5640] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1351.994518][ T5640] ? __check_object_size+0x3d/0x437 [ 1351.999700][ T5640] netlink_sendmsg+0x8a5/0xd60 [ 1352.004447][ T5640] ? netlink_unicast+0x710/0x710 [ 1352.009366][ T5640] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1352.014892][ T5640] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1352.020346][ T5640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.026573][ T5640] ? security_socket_sendmsg+0x8d/0xc0 [ 1352.032019][ T5640] ? netlink_unicast+0x710/0x710 [ 1352.036939][ T5640] sock_sendmsg+0xd7/0x130 [ 1352.041338][ T5640] ___sys_sendmsg+0x803/0x920 [ 1352.045997][ T5640] ? copy_msghdr_from_user+0x440/0x440 [ 1352.051436][ T5640] ? __fget+0xa3/0x560 [ 1352.055484][ T5640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.061704][ T5640] ? __fget+0x384/0x560 [ 1352.065841][ T5640] ? ksys_dup3+0x3e0/0x3e0 [ 1352.070252][ T5640] ? __fget_light+0x1a9/0x230 [ 1352.074919][ T5640] ? __fdget+0x1b/0x20 [ 1352.078968][ T5640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1352.085193][ T5640] __sys_sendmsg+0x105/0x1d0 [ 1352.089766][ T5640] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1352.094777][ T5640] ? switch_fpu_return+0x1fa/0x4f0 [ 1352.099879][ T5640] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1352.105927][ T5640] __x64_sys_sendmsg+0x78/0xb0 [ 1352.110674][ T5640] do_syscall_64+0xfd/0x6a0 [ 1352.115157][ T5640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1352.121029][ T5640] RIP: 0033:0x459879 [ 1352.124904][ T5640] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1352.144485][ T5640] RSP: 002b:00007f25c2a5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.152874][ T5640] RAX: ffffffffffffffda RBX: 00007f25c2a5dc90 RCX: 0000000000459879 [ 1352.160836][ T5640] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1352.168789][ T5640] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1352.176738][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c2a5e6d4 14:00:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x414, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}, @TCA_CBQ_RATE={0x10}]}}]}, 0x444}}, 0x0) [ 1352.184685][ T5640] R13: 00000000004c77c2 R14: 00000000004dd018 R15: 0000000000000005 [ 1352.196325][ T5640] kasan: CONFIG_KASAN_INLINE enabled [ 1352.201622][ T5640] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1352.223084][ T5640] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1352.230040][ T5640] CPU: 1 PID: 5640 Comm: syz-executor.0 Not tainted 5.3.0-rc7+ #0 [ 1352.237838][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.247905][ T5640] RIP: 0010:qdisc_put+0x25/0x90 [ 1352.252753][ T5640] Code: 00 00 00 00 00 55 48 89 e5 41 54 49 89 fc 53 e8 c1 52 bf fb 49 8d 7c 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 54 41 8b 5c 24 10 31 ff 83 e3 01 [ 1352.272350][ T5640] RSP: 0018:ffff88802d1af488 EFLAGS: 00010202 [ 1352.278410][ T5640] RAX: dffffc0000000000 RBX: ffff8880168e6bc0 RCX: ffffc90006454000 [ 1352.286375][ T5640] RDX: 0000000000000002 RSI: ffffffff85b3228f RDI: 0000000000000010 [ 1352.294340][ T5640] RBP: ffff88802d1af498 R08: ffff88808be44040 R09: fffffbfff11cae77 [ 1352.302313][ T5640] R10: fffffbfff11cae76 R11: ffffffff88e573b3 R12: 0000000000000000 [ 1352.302480][ T5645] kobject: 'kvm' (00000000c7986b4c): kobject_uevent_env [ 1352.310272][ T5640] R13: ffff8880168e6bc0 R14: ffff8880a9954e00 R15: ffff8880168e6bfc [ 1352.310284][ T5640] FS: 00007f25c2a5e700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 14:00:45 executing program 3: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/bnep\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x2, r1, 0x0, 0x0) [ 1352.310293][ T5640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1352.310301][ T5640] CR2: 0000000000625208 CR3: 0000000014043000 CR4: 00000000001426e0 [ 1352.310313][ T5640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1352.310321][ T5640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1352.310326][ T5640] Call Trace: [ 1352.310345][ T5640] sfb_destroy+0x61/0x80 [ 1352.310362][ T5640] ? sfb_zero_all_buckets+0x20/0x20 [ 1352.317471][ T5645] kobject: 'kvm' (00000000c7986b4c): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1352.325231][ T5640] qdisc_create+0xbc6/0x1210 [ 1352.325249][ T5640] ? tc_get_qdisc+0xc10/0xc10 [ 1352.325268][ T5640] tc_modify_qdisc+0x524/0x1c50 [ 1352.325287][ T5640] ? qdisc_create+0x1210/0x1210 [ 1352.325311][ T5640] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1352.376002][ T3908] kobject: 'loop3' (00000000a543ebe9): kobject_uevent_env [ 1352.377308][ T5640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1352.377326][ T5640] ? qdisc_create+0x1210/0x1210 [ 1352.394375][ T3908] kobject: 'loop3' (00000000a543ebe9): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1352.396248][ T5640] rtnetlink_rcv_msg+0x463/0xb00 [ 1352.396267][ T5640] ? rtnetlink_put_metrics+0x580/0x580 [ 1352.396284][ T5640] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1352.396300][ T5640] ? __copy_skb_header+0x250/0x550 [ 1352.396319][ T5640] netlink_rcv_skb+0x177/0x450 [ 1352.396337][ T5640] ? rtnetlink_put_metrics+0x580/0x580 [ 1352.470298][ T5640] ? netlink_ack+0xb30/0xb30 [ 1352.474894][ T5640] ? netlink_deliver_tap+0x254/0xbf0 [ 1352.480187][ T5640] rtnetlink_rcv+0x1d/0x30 [ 1352.484603][ T5640] netlink_unicast+0x531/0x710 14:00:45 executing program 3: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/bnep\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x2, r1, 0x0, 0x0) [ 1352.489370][ T5640] ? netlink_attachskb+0x7c0/0x7c0 [ 1352.494482][ T5640] ? _copy_from_iter_full+0x25d/0x8a0 [ 1352.499856][ T5640] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1352.505576][ T5640] ? __check_object_size+0x3d/0x437 [ 1352.507958][ T3908] kobject: 'loop3' (00000000a543ebe9): kobject_uevent_env [ 1352.510774][ T5640] netlink_sendmsg+0x8a5/0xd60 [ 1352.522622][ T5640] ? netlink_unicast+0x710/0x710 [ 1352.525785][ T3908] kobject: 'loop3' (00000000a543ebe9): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:00:46 executing program 3: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/bnep\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x2, r1, 0x0, 0x0) [ 1352.527561][ T5640] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1352.527578][ T5640] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1352.527594][ T5640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.527608][ T5640] ? security_socket_sendmsg+0x8d/0xc0 [ 1352.527626][ T5640] ? netlink_unicast+0x710/0x710 [ 1352.565325][ T5640] sock_sendmsg+0xd7/0x130 [ 1352.569754][ T5640] ___sys_sendmsg+0x803/0x920 [ 1352.574439][ T5640] ? copy_msghdr_from_user+0x440/0x440 [ 1352.579903][ T5640] ? __fget+0xa3/0x560 [ 1352.583974][ T5640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:00:46 executing program 3: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/bnep\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x2, r1, 0x0, 0x0) [ 1352.590221][ T5640] ? __fget+0x384/0x560 [ 1352.594382][ T5640] ? ksys_dup3+0x3e0/0x3e0 [ 1352.598807][ T5640] ? __fget_light+0x1a9/0x230 [ 1352.603485][ T5640] ? __fdget+0x1b/0x20 [ 1352.607557][ T5640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1352.613809][ T5640] __sys_sendmsg+0x105/0x1d0 [ 1352.618408][ T5640] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1352.623474][ T5640] ? switch_fpu_return+0x1fa/0x4f0 [ 1352.628592][ T5640] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1352.634673][ T5640] __x64_sys_sendmsg+0x78/0xb0 14:00:46 executing program 3: clone(0x41bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1005, 0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x2) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/bnep\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) [ 1352.639436][ T5640] do_syscall_64+0xfd/0x6a0 [ 1352.643940][ T5640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1352.649824][ T5640] RIP: 0033:0x459879 [ 1352.653719][ T5640] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1352.673326][ T5640] RSP: 002b:00007f25c2a5dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.681744][ T5640] RAX: ffffffffffffffda RBX: 00007f25c2a5dc90 RCX: 0000000000459879 [ 1352.689887][ T5640] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1352.697862][ T5640] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1352.705839][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c2a5e6d4 [ 1352.713813][ T5640] R13: 00000000004c77c2 R14: 00000000004dd018 R15: 0000000000000005 [ 1352.721803][ T5640] Modules linked in: [ 1352.726732][ T5640] ---[ end trace bb2ccbebd062c58e ]--- [ 1352.732228][ T5640] RIP: 0010:qdisc_put+0x25/0x90 [ 1352.737147][ T5640] Code: 00 00 00 00 00 55 48 89 e5 41 54 49 89 fc 53 e8 c1 52 bf fb 49 8d 7c 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 54 41 8b 5c 24 10 31 ff 83 e3 01 [ 1352.756819][ T5640] RSP: 0018:ffff88802d1af488 EFLAGS: 00010202 [ 1352.762894][ T5640] RAX: dffffc0000000000 RBX: ffff8880168e6bc0 RCX: ffffc90006454000 [ 1352.770910][ T5640] RDX: 0000000000000002 RSI: ffffffff85b3228f RDI: 0000000000000010 [ 1352.778941][ T5640] RBP: ffff88802d1af498 R08: ffff88808be44040 R09: fffffbfff11cae77 [ 1352.779494][ T3908] kobject: 'loop3' (00000000a543ebe9): kobject_uevent_env [ 1352.786950][ T5640] R10: fffffbfff11cae76 R11: ffffffff88e573b3 R12: 0000000000000000 [ 1352.786958][ T5640] R13: ffff8880168e6bc0 R14: ffff8880a9954e00 R15: ffff8880168e6bfc [ 1352.786970][ T5640] FS: 00007f25c2a5e700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1352.786985][ T5640] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1352.800450][ T3908] kobject: 'loop3' (00000000a543ebe9): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1352.802093][ T5640] CR2: 0000000000625208 CR3: 0000000014043000 CR4: 00000000001426e0 [ 1352.843855][ T5640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1352.851891][ T5640] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1352.859906][ T5640] Kernel panic - not syncing: Fatal exception [ 1352.867547][ T5640] Kernel Offset: disabled [ 1352.871876][ T5640] Rebooting in 86400 seconds..