0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29004c002000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:25 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf00000000000000) 05:10:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6c02, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290060002000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:25 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x8000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:25 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc70"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1208.480163] validate_nla: 6 callbacks suppressed [ 1208.480173] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290068002000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x7400, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:26 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x8048000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29006c002000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1208.706100] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:26 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1100000000000000) 05:10:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x7a00, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290074002000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:26 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x8121000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:26 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:26 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1209.483396] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29007a002000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x8100, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:27 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x8129000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900f0002000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1209.637532] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:27 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1300000000000000) 05:10:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xb515, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900f2022000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:27 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x8150000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:27 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1210.475753] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000032000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000052000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:28 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x8350000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1210.677902] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfeff, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000062000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:28 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2000000000000000) 05:10:28 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x9be3000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:28 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1211.452637] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:28 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000072000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xff0f, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:29 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x9c05000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1211.602295] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfffe, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000a2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000c2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1211.793946] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1212.351133] net_ratelimit: 26 callbacks suppressed [ 1212.351142] protocol 88fb is buggy, dev hsr_slave_0 05:10:29 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2100000000000000) 05:10:29 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xa000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x34000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000e2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:29 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1212.434889] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000f2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:29 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x40000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:30 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xc000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900db1d2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1212.991100] protocol 88fb is buggy, dev hsr_slave_0 [ 1212.996413] protocol 88fb is buggy, dev hsr_slave_1 05:10:30 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2900000000000000) 05:10:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x400300, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000202000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:30 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xc100000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:30 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900003f2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf0ffff, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:31 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xe000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000402000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1213.615231] validate_nla: 2 callbacks suppressed [ 1213.615240] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:31 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2b00000000000000) 05:10:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x1000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000482000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:31 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x10000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:31 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1214.405837] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900004c2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x1030000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:32 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x20000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290065582000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1214.605662] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1215.071084] protocol 88fb is buggy, dev hsr_slave_0 [ 1215.076277] protocol 88fb is buggy, dev hsr_slave_1 05:10:32 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2c00000000000000) 05:10:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x2000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:32 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x20002740, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000602000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:32 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) [ 1215.403646] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:32 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290058652000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1215.460012] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x3000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:33 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x22000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000682000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1215.692869] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:33 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2f00000000000000) 05:10:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 05:10:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900006c2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x4000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:33 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x3b9ac9ff, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:33 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) 05:10:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000742000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1216.388957] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:33 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 05:10:33 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x40000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900007a2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1216.511099] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.516222] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.521412] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.526490] protocol 88fb is buggy, dev hsr_slave_1 05:10:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x5000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1216.591031] protocol 88fb is buggy, dev hsr_slave_0 05:10:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) [ 1216.676307] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:34 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3200000000000000) 05:10:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900f57f2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8}, 0x10) 05:10:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:34 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x40270020, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:34 executing program 2: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) [ 1217.351529] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x7000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8}, 0x10) 05:10:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000812000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1217.443251] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:34 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x60000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x8000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:35 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8}, 0x10) 05:10:35 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3300000000000000) 05:10:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29001ddb2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xa000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:35 executing program 4: 05:10:35 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x65580000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:35 executing program 2: 05:10:35 executing program 2: 05:10:35 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d6402000000000045040400010000000704000000000000b7040000100000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xd0, 0x0, &(0x7f0000000640)="fff26e148164f9faea9230177ecf75cb7af70b00e0a3ce439bd0ad128eb5c83174f8a0f924e36f098f76a6b0f5a28105d6bca4e6daf5f75309361b14c77c89918348f8857f0b49425df33211edcbcbcc97d85119bc1ec9988bbc7c01076f0cd514e2ec777060d5b1ee5ec3b89e57807d82a2cc47f80dad8b4628d3e0eb88f4c7d73680672459ee6dbbce60bbd7bf08e88142e567f935f3d66964e5ec19235de90a6ae5919acd8c1b308dd485c8bcd75be11cbad59144b68ad5270831da4a6ac40902da0f849598a7d019dfbeb643e35a", 0x0, 0x3ff}, 0x28) 05:10:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xc000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000f02000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:35 executing program 4: socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8981, &(0x7f0000000000)='ip6gre0\x00') 05:10:35 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x2f) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @rand_addr="bebbdd58551518216673f8ec308656cb"}, 0x1c) [ 1218.591043] net_ratelimit: 6 callbacks suppressed [ 1218.591051] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.601093] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.606246] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.611363] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.671052] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.671093] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.676194] protocol 88fb is buggy, dev hsr_slave_1 [ 1218.681326] protocol 88fb is buggy, dev hsr_slave_0 [ 1218.691355] protocol 88fb is buggy, dev hsr_slave_1 [ 1219.231105] protocol 88fb is buggy, dev hsr_slave_0 05:10:36 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x380a000000000000) 05:10:36 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x6c0e0000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xe000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290002f22000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2100000000000000) 05:10:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1219.353565] validate_nla: 3 callbacks suppressed [ 1219.353575] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29007ff52000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:36 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x77359400, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000000a00190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1219.550390] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:37 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3c00000000000000) 05:10:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x10000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000000c00190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:10:37 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x7fffe0b0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:37 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe00000000000000) 05:10:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) [ 1220.301602] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x20000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000000f00190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:37 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x7fffe186, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1220.493036] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:10:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x40000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1220.716097] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:38 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00000000000000) 05:10:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000022000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:38 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x7fffeff2, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x48000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8}, 0x10) [ 1221.268733] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000032000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:38 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8}, 0x10) 05:10:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x4c000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:38 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x7ffff000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:38 executing program 4: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x22, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1221.483384] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000000000000000) 05:10:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000042000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x60000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:39 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x81000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:39 executing program 4 (fault-call:2 fault-nth:0): socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1222.231333] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:39 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000052000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:10:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x65580000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:39 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x86e1ff7f, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1222.472591] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:40 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x542e010000000000) 05:10:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000062000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x68000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:40 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:40 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x88a8ffff, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:40 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x20002480}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1223.212053] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6c000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:40 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r0, 0x0, 0x1, 0x4}}, 0x20) 05:10:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000072000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:40 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xb0e0ff7f, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:40 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r0, 0x0, 0x1, 0x4}}, 0x20) 05:10:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6c020000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:41 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000000000000000) 05:10:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000082000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x74000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:41 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xf2efff7f, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:41 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r0, 0x0, 0x1, 0x4}}, 0x20) 05:10:41 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x7ffff000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x7a000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000a2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:41 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xff600000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:41 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1224.363287] validate_nla: 3 callbacks suppressed [ 1224.363297] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x81000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1224.535651] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1224.831134] net_ratelimit: 23 callbacks suppressed [ 1224.831144] protocol 88fb is buggy, dev hsr_slave_0 [ 1224.841210] protocol 88fb is buggy, dev hsr_slave_1 [ 1224.846350] protocol 88fb is buggy, dev hsr_slave_0 [ 1224.851461] protocol 88fb is buggy, dev hsr_slave_1 [ 1224.911043] protocol 88fb is buggy, dev hsr_slave_0 [ 1224.911059] protocol 88fb is buggy, dev hsr_slave_0 [ 1224.916208] protocol 88fb is buggy, dev hsr_slave_1 [ 1224.921521] protocol 88fb is buggy, dev hsr_slave_1 [ 1224.931639] protocol 88fb is buggy, dev hsr_slave_0 [ 1224.936681] protocol 88fb is buggy, dev hsr_slave_1 05:10:42 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x7004000000000000) 05:10:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000c2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:42 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffc99a3b, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x88a8ffff, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:42 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x2000025f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1225.199800] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000e2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x9effffff, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:42 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffffa888, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000f2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1225.445241] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:43 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x84ffffff00000000) 05:10:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xb5150000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000102000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:43 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x150800000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:43 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x7fffe000}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf0ffffff, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000482000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1226.196009] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:43 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:43 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x350800000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfeff0000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1226.359613] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900004c2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1226.498607] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:44 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88ffffff00000000) 05:10:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xff0f0000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000602000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:44 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x60ffffffffff, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:44 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x8, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) [ 1227.268782] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000682000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xffffa888, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:44 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x7fffffffefff, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900006c2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1227.497914] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:45 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x89ffffff00000000) 05:10:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfffff000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:45 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x7ffffffff000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000742000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:45 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda, 0x3b9ac9ff}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1228.216436] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900007a2000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xffffff7f, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:45 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x4000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002500190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1228.511665] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xffffff9e, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000006000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:46 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x10120800000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:46 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda, 0xffc99a3b}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:46 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x900b000000000000) 05:10:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000006700190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfffffff0, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:46 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x30be0900000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000000a00190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x4000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1229.467153] validate_nla: 3 callbacks suppressed [ 1229.467163] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000000c00190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x40030000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1229.658179] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:47 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x97ffffff00000000) 05:10:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000000f00190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:47 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x40030000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf0ffffffffffff, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:47 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda, 0xffc99a3b00000000}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) [ 1230.171813] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x100000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002500190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:47 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x50c00900000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000006000190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1230.340100] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1230.365401] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 05:10:48 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xc805000000000000) 05:10:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x103000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000006700190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 05:10:48 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x80040800000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:48 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}, 0x3b9ac9ff}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x200000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1231.104261] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 05:10:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002002190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:48 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x90120800000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1231.235560] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002003190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) [ 1231.711140] net_ratelimit: 26 callbacks suppressed [ 1231.711149] protocol 88fb is buggy, dev hsr_slave_0 [ 1231.721287] protocol 88fb is buggy, dev hsr_slave_1 05:10:49 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xdc05000000000000) 05:10:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x300000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002004190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 05:10:49 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x94357700000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:49 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}, 0xffc99a3b}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) [ 1232.087581] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1232.112768] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002005190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x400000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:49 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xa0010000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) [ 1232.269670] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002006190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:50 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe803000000000000) 05:10:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x500000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 05:10:50 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xf0ff7f00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002007190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:50 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}, 0xffc99a3b00000000}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002008190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:50 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1233.061823] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1233.151111] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.156216] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.161420] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.166500] protocol 88fb is buggy, dev hsr_slave_1 05:10:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200a190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x600000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:50 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xf0ffffff7f0000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1233.206485] FAULT_INJECTION: forcing a failure. [ 1233.206485] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.231035] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.231051] protocol 88fb is buggy, dev hsr_slave_0 [ 1233.236113] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.241155] protocol 88fb is buggy, dev hsr_slave_1 [ 1233.312137] CPU: 0 PID: 21837 Comm: syz-executor.2 Not tainted 5.0.0-rc5+ #66 [ 1233.319457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.328813] Call Trace: [ 1233.331419] dump_stack+0x172/0x1f0 [ 1233.335073] should_fail.cold+0xa/0x1b [ 1233.338986] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1233.344137] ? ___might_sleep+0x163/0x280 [ 1233.348312] __should_failslab+0x121/0x190 [ 1233.352578] should_failslab+0x9/0x14 [ 1233.356401] __kmalloc_track_caller+0x2d8/0x740 [ 1233.361093] ? ucma_set_option+0x10c/0x490 [ 1233.365352] memdup_user+0x26/0xb0 [ 1233.368991] ucma_set_option+0x10c/0x490 [ 1233.373094] ? ucma_set_ib_path.isra.0+0x540/0x540 [ 1233.378036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1233.383586] ? _copy_from_user+0xdd/0x150 [ 1233.387751] ucma_write+0x2da/0x3c0 [ 1233.391399] ? ucma_set_ib_path.isra.0+0x540/0x540 [ 1233.396357] ? ucma_open+0x290/0x290 [ 1233.400093] ? __fget+0x340/0x540 [ 1233.403571] __vfs_write+0x116/0x8e0 [ 1233.407299] ? lock_downgrade+0x810/0x810 [ 1233.411486] ? ucma_open+0x290/0x290 [ 1233.415217] ? kernel_read+0x120/0x120 [ 1233.419117] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1233.424061] ? common_file_perm+0x1d6/0x6f0 [ 1233.428408] ? apparmor_file_permission+0x25/0x30 [ 1233.433263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1233.438814] ? security_file_permission+0x94/0x320 [ 1233.443767] ? rw_verify_area+0x118/0x360 [ 1233.447932] vfs_write+0x20c/0x580 [ 1233.451497] ksys_write+0xea/0x1f0 [ 1233.455052] ? __ia32_sys_read+0xb0/0xb0 05:10:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x700000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1233.459126] ? do_fast_syscall_32+0xd1/0xc98 [ 1233.463546] ? entry_SYSENTER_compat+0x70/0x7f [ 1233.468137] ? do_fast_syscall_32+0xd1/0xc98 [ 1233.472562] __ia32_sys_write+0x71/0xb0 [ 1233.476554] do_fast_syscall_32+0x281/0xc98 [ 1233.480894] entry_SYSENTER_compat+0x70/0x7f [ 1233.480909] RIP: 0023:0xf7f6f869 [ 1233.480926] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1233.480935] RSP: 002b:00000000f5d6b0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1233.480951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 1233.480961] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.480970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1233.480979] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1233.480989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:10:51 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf401000000000000) 05:10:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200c190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x800000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:51 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:51 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x100000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:51 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x3b9ac9ff, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xa00000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200e190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:51 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffc99a3b, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:51 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x200000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:51 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffc99a3b00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:52 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffffff00000000) 05:10:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0x16, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xc00000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200f190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:52 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x300000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002010190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1235.012632] validate_nla: 4 callbacks suppressed [ 1235.012644] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x200002a0, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002048190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xe00000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:52 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x400000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:52 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000380)={0x20, 0x200, 0x0, 0x100000000, [], [], [], 0xfd5, 0x0, 0x101, 0xe595, "9c20307c213604bd8dcbd9ce8cf4e839"}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa02, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1235.334300] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:53 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xc0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:10:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000204c190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf00000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x2, r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:53 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x500000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1235.962552] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x1000000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002060190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x3f00, r1, 0x0, 0x1, 0x4}}, 0x20) [ 1236.042165] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 1236.093809] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:53 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x600000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x2000000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:53 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x1c6a52ef8b5ebde5, 0x6, {0x3, 0x0, 0x100000000, 0x1ff}}) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002068190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1236.316528] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1236.786209] kernel msg: ebtables bug: please report to author: Wrong nr of counters 05:10:54 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x200000000000, 0xa000}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:10:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1000000, r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000206c190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x4000000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:54 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x700000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1236.945438] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x2000000, r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002074190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x4800000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:54 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x800000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x3f000000, r1, 0x0, 0x1, 0x4}}, 0x20) [ 1237.138116] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:54 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x0, r1}) sync_file_range(r0, 0x1d, 0x8, 0x7) 05:10:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000207a190000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1237.311058] net_ratelimit: 14 callbacks suppressed [ 1237.311066] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.321201] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.326364] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.331494] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.391112] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.391151] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.396246] protocol 88fb is buggy, dev hsr_slave_1 [ 1237.401374] protocol 88fb is buggy, dev hsr_slave_0 [ 1237.411380] protocol 88fb is buggy, dev hsr_slave_1 05:10:55 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000080)) 05:10:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x4c00000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:55 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xa00000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x100000000000000, r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000600000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x200000000000000, r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000600000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1237.881407] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6000000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1237.951044] protocol 88fb is buggy, dev hsr_slave_0 05:10:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x3f00000000000000, r1, 0x0, 0x1, 0x4}}, 0x20) 05:10:55 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xc00000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1238.072223] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:55 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526e500176d590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032573d2f6df717dec7a19fefa25408586160516616bdf09bfdfd9ab42a9764caef1ddb6359b1f64f5064d34b5d291a50e0e0c9c54c28127a5ba8c1aafc88909fa88418b7eeb0b388c70f09cacee5bf824d674092bf636b28573a833330af5635400fedb4f47cff5b561b198ee0dd342ab4250afc6eced28101786fc4949e2c2478b92673591e1b0ac9fc3c249ffa42d12f8141"], 0x1}}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6558000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1238.268242] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:56 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x90) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x100000001, 0x3, 0xfffffffffffffff9}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendfile(r4, r4, &(0x7f0000000180), 0x4) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xa) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:10:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190200003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x2, 0x1, 0x4}}, 0x20) 05:10:56 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xc10000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6800000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6c00000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1238.846476] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x3f00, 0x1, 0x4}}, 0x20) 05:10:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190300003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:56 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xe00000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x6c02000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1239.041793] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:56 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xd6, 0x4001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x920, 0x0, {0x3, 0x3, 0x10000, 0x2, 0x8}}) r1 = socket$tipc(0x1e, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r2, &(0x7f0000000080)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/147, 0x93}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(r1, 0x0, 0xffffffffffffff51, 0x40, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190400003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1239.237777] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:57 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 05:10:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x1000000, 0x1, 0x4}}, 0x20) 05:10:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x7400000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:57 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x1000000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190500003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x7a00000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1239.909856] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x2000000, 0x1, 0x4}}, 0x20) 05:10:57 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x2000000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190600003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x8100000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:57 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80), 0x0, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x1}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x8000000000000}) 05:10:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x3f000000, 0x1, 0x4}}, 0x20) [ 1240.133512] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1240.257417] validate_nla: 5 callbacks suppressed [ 1240.257429] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:58 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400000000000000) 05:10:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190700003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:58 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x2200000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x88a8ffff00000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:58 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1e) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200050100460004000000ffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58ae381ab6a79cf016b00b2b76e5ad444249d672eb476298e8e03b1205134c4f51b8063735a1dba2497208261f638f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a00000000015959e2a3"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), 0x4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x100000000000000, 0x1, 0x4}}, 0x20) [ 1240.830657] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x9effffff00000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1240.880031] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:58 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c96469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc70320000000000000000"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x200000000000000, 0x1, 0x4}}, 0x20) 05:10:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190800003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:58 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x4000000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1241.029092] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xb515000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1241.128090] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1241.211676] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x3f00000000000000, 0x1, 0x4}}, 0x20) 05:10:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190a00003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:10:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xf0ffffff00000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:59 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x40000002, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:10:59 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x4027002000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190c00003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1241.781220] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1241.802660] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfeff000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:59 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffff0800887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc759d21394877fe8a26d76a768b5c563e19e0c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x2, 0x4}}, 0x20) 05:10:59 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x6000000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190e00003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1242.001679] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1242.029936] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:10:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xff0f000000000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:10:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x300, 0x4}}, 0x20) [ 1242.143092] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:10:59 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x6558000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:10:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xffffff7f00000000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1242.213654] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1242.335698] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0xffffff1f, 0x4}}, 0x20) 05:11:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0xfffffffffffff000, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:00 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1242.654032] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:00 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x2, 0x2) ioctl$TCSBRK(r3, 0x5409, 0x6) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) syz_open_dev$usb(&(0x7f0000000580)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f00000000c0)={0xffffffff, 'syz0\x00'}) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000440)={0x3fff800000, 0x2cb, &(0x7f0000000140)="b3941f310ca55e34e01aafcafbe8353f2bde86aba021d7db58b412e1ccf81790bbdc73a14429c331608f4048d58edbd3582921552c2db70e4e3a305f87221a4bc787644a794654515318d04d50617909ace7a7fac8bf13d92dd75939d4038cde604db40e8d646aed17ee3cec3d755d9d1af0cc4430eda9714c54cf564a40e789912db63aa4e83049d6510008c9e39764c54f53fb7eea3a6e1213ad3789ce0c2e14b006a9c6116187bce4c197876637c89b08b3e888c4f8becd52e01f1363aa80295a8a8f4a59a1792afaf4eb916bdc7c616af2984ea218d34c77a1e18e2ce250016d98ee5cc7bb092cf4f9", &(0x7f0000003ec0)="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", 0xeb, 0x1000}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000002e80)={0x0, 0xfb, 0x1015, 0x3, 0x0, "5db9e18e01a48f96be4c20887ab967b3", "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"}, 0xfffffffffffffd88, 0x2000002) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000004c0)='trusted.overlay.upper\x00', &(0x7f0000004ec0)={0x0, 0xfb, 0x1015, 0x2, 0xffffffffffffffff, "84ba635fde2f11fc229fe58942361afa", "5c492751aa4d001cb353b25b5adc1e1bd4f525dc905826716f3ac4d7410d2ba3cef76060559cb8a408bad114900a61aab5212e20c9e4059ea0098b8515935fe7632d772bee533556c8fb40122b0370e47955c6cffb2d4b5ea9447eb4812036d8b28245639d3bfeaddb969aac8f1cf626a1480e2b9d03248296d5b40aa060c7894667a4241597cf272666f1aabbb618214b3d86bec32d78517b8eec95eb51781cb4a5abe2148b670b610604aabceb8dc69898031d2a5f1062e68f2db066905fb3e79e67fefecb8e3fdcf58e280727fd9572187bfa1d471301824270534f56b7efeeb41036712e9d18f73d7198bb530327eb443a775cbddb6e4065caaff38986eb84bb067f49e585576e578cabcf273db16fce3ab8bdcb1945957fd7c552335d0de6f23cd49d07136eb7fb0a464f02701d9de8df3e54ebe409d2b34ab24ad7838024dadc8008ebd8e07a1890a811591d8a0851ae92ec372d1f102781f44505dd4b9cd7bbde43243fbbdefb1fec0ae0700a89b806e5c4708e8501ece635ccfb9821f2871cf3fb097b611a480911b1d85652ae4f6d6ffd68ecd1d01db81a7026b33e5354ca853acb8b1f512563552c279a7708801a928a821a00b8c41fde27a10c96fff6cb0d4ebb2feec5d82dc3055a5c7706e8ad5539a790f72405bb8dfebbfcfea77e433861bcd20c550ba89e2b59ad829fea5402b415a3573d861ce84c23497f29d551b64c8a0294dff85db972e62bfd78be64a4370322270281bff8deaf8539972bbd75534407db2ade82e57e151357d3a9ac41e5266f2a6b0e45a022214be05fbb5668c9b015a1ed2d3739cece92e7e0030aed7c2b8bbd6abc4faaa324a079d42fa259dfed53e072c382dcd16420b241c2b34c376a95aff6a2d260fa35833e02e9195b817d14963fd20176402da54e4321a7e6d801a71c6aa5cd1ea511bfba80257b5bc233bfb5cd102fe31ee10b2c931923c5b2862a3563d0dae47662ff4df94ee4b7cd8930f6975270aefb1dc8aede0e216811723dc6c37ae3cd24cde4a3deab0cc2ec08ceb65e16af764417dc473c2e3c0665da0d4e9b41a193f0a47562284acd688d1b21045e4231d9d4d9eae2182cf27b155dece9240ca9c449d299139ce0bd6370c642ff1d90a9c620db45f8511325dbbc6646891d9b31d13b3605020be4df1e70833f6667dda701f4254937249a33b326a51f5506b8dd2bc255b917a3e68253d30183f914f6681ed2e0d510480fe76025f932e9604988d50f2e7106a47d9751544bd84daa00e921626b532127e2286d476687e64a8a854b4ec4aeca2820a1b0d1b0e22134fa4ddf78c29cc70b2fb86792f053cfdc4e0575e9fc2da8044ff867eaf142083082bde4c5e76d89050033a8285b0e31e27d883ca9933fbb35fb011d728dd3570ecc8c95a67b1f92f24c1a0a2bd8da9ed316301f9df7552f9c07b377d2f1f95f73fe97cdba8a1b7ee343dd57eba81cd9c97d20597ae170ead9e33a4036454bb2c151d0af1ea649a0fb4935f60a00be6704d81ea7811ddaec76944c87978f729b94c63a5d2ae9b9a4ed5fe6943313da7ded84c5f3243da5720c75507f3e283afe4d64714f11ee5232d6078bba57f629857ad3ef46ce58196d3b05843ba42cd45dc8e22f06ea238545b051bf7c78c375445cf0a10b43ae4bb2dd7e4bf21e5c07741482c4541ae1ab8fcd320e1edb5c6d4cde83a5f003193b70f7ae889854e6d1c5925f2bd6d90aae6e6ab89c30d17fa138ab03e3b71a49256f731f5bb5263cf24d04e4f4c96a4fe183dcdde1d91e19a93efddbeb31a766359fb86da7dd3eea8ea7af03f94f01a923e949c0cd65fdfc265d2f4de30e30bad714ccc7fbaae01c9eb32c392b1b76438f4ff8fa4c4bb3740b0e2da51ff47c0349284b070c22ffd8b61c7db44f62be5d64161ab39ab162a5dd0ddd35592a01a04be1efbac874b0541838bf1e5d9acd0e20be9efef066dc2a125f0bf728bb22ab01ee13936afc819af54616239a0f2213516a8060e040a1ebb6f2f9f9b46a3def25912a906f2fffb829dd2103f195318ce56f4d103271973db10e2df1ad86a9d3f84e755086e11f5f56824246a278d1d929837fdf0ead9187d0310f1a343a044a1153ec0209f07baacc4c39952445226e6b4d519b8da31cad233cd88a30438e181a09a37d8eb289003add384bbb64f3432d41ce70d53acd91ba6af6b478e34b2e5127384128b757400557e0ec32a8f59e44dd1500702306ef4e8131b576d5aeb6fec44af918bfd887cb1adbb93ac66f9b953c74661137fbd9778a32aed4ec59148d011dce2a6ca35c04500c740314b41c1e2e24cc11b41ccc2ee1b5e077d87b3ef8f9a2d83f27ac27ddd3b1dba647616c4bfc38498a74fc3f01fa1e34cb1b2cfdffc7fecce877cf14864ab83357df53f69412f01024a243da351662e7f615d3d6fff1e59e8f709ad23cff729e41bf75fc06cf56010bded748e4d056328d70d0ea466589031ab3da65e598143e211f5d8a90c1a4ab7e81b3f1ef293cdba068f46d2048cb9d8dabff232237bf9cde4a2539a7e83cb29b6a0ff74d1861de3bbe7d2fb325f057082a209f574cc9218b52edfa9cbcdfd571f936f979b05ac3a34cf21b0eb7fc70b69660f83c5266257fe025903adaa22bd237d881c5c9f5c6eae22ca53b4da91c4350228981278d2cfed5967dfdd6c2eb332869cab9349eef8234cf8c31ebf61f76f2d0ba7f5b1be1fcee1b0a8df1f4ef24f39bb8360a79d0d0224aaa949704446b894db25c7faf6d978a7991131a7b997e4a1dac216380125d587f9ed783ccb985d4f75b13f535bf81c424f4959df0d6056b9bac3147f69b5a636a76eb1962c1fd8c78cd8ffbf4f041b0832154c7c66944bb9e9058de92c9a95f0f831bba5113da7e39ddcf102c2d70d1f5d9dd6e58fd0e25e8b1324f296c23881e1e881d38c393bbc965798f5f04560c97a7b23304ff0599b1f1d06667fe5c8f9cfe4d88bee9c5eca40345b2457f09c6ba5d6860528914d244833515dd96690df93f9ade5830de5c38125ffe14b12add255ae609be7f5611e1dcf378dc05104903e7a53617eaa28b686e219920d09877d3136946ec66427ce11f3bb01092b7aaa519cfd8ea0daefc7a67d211c3b49740bee0e609fd157b6663c53c8f2e835af19e069331e8a50622a622fc2dd8842612759ecdfc4fde6ea1a1263dc8d5ad97fd021ded377630fdb1937880e3239de2bbcfb6722362ed36facc7ac8ad2fc00b6ead83e95394aee113cf25db1011e9a8fc55a3960ccb76b61d586ef431f8234244a8f4cbc20ce76da9f825b1a4ee6a2c988424eddf1f44a16b04ad36cfc2ed7427f7de0c3c361fb3dfff978ae5a5891dba1a2cbff2333c6a79de932c818de6e7fd33dba533fde03513f666bbf4b1bbe18e47a027d690f49aee54852bc1dd506fa80dd97fd761c6a977b03829bd996757fd449fa4850b89e4d884e11f7c5dc41d8a92e1ca66b7a2fda2751e71a1d68f73dd3bdff47104bd44867e4030c8d8ae96c3e6f92e902541669ef0e5ecc9bc2c59f06e9cdc551c1cce70ec60569b1c5ab9f69ea78ac31cc5d13f5c218159aad19bb307900ee1269a239869ca83f9b4f4c02d66634d7667ce7783ac29f9771bc74a8400c19d64ed12f8febff1895c236f42289b2d2663c6504bae796b642af079e767383e91bc99125309552a6ca84048cd960e703e50a01cd1193993a92bbf039df8484ba6d2a57adb527057761caf4ee82d3d36e711060ebba357ada458aefeb8ddd6114afd310b061ec528b5e460d444ffacd0be609a24af6354ce158bc5335d074fc00c84d6665f5b68819f91bbf6f7f4fb9228626ed17688dcc99465fb668ad8e7fa411defcb754126aa334f38409c6c1cd5bd4ca1e21a7d99de3e4479038cbb1dcd03ec107b53477ae35dc8cfcc765dd813d2f440bfa736de0ef9776bb5d28c0908ee76295f42b25e98d291eb627c40ccd768f8eed4979eff3cdb47ad4b347e0d4d6d4a8ce335db48e9b827fb75b8e98b93f38609f3359f21bc1f61e14981b8c6682a754135f1edd4b6343ad78877e984257508ec96c3e781d50d904522039d4c8193a03dd6169e930141d8ebcb724b7c319f3a81878eab774c688806574a3dd0d443b288bc2c13124bde9c7bf14361d1a2d457e59eb4fe4376cda34f8d6cc82499afdda53b90b4118a9dd7783a5b54e65cfc43a389465ef2f267441ad9b01221bb845c9fd84a541c084a224be363beb48d2e3efd24df6ba7e29ee40a1acee40d44ac4e403cd16e02c4a01c94e9ac99949ca464b2b9f20480a4a1f73027c9bafc7c98de7e24982b18fe8a573b883f646ed46ea6192701b7d1d03aa9215e3fb720c1486db6335b16de2f05b4f5440e1b783cdd928cf28125c035b375545566268668e910a2d86321ff77573cbc9a3f2060512c463b12744e0e5610df0b723c7e7a92079ba2102f2db105cfc18405506a019af8fb6fb559c3c78d795ca03650720c19958c4d7a864e9c01a98bf74980e66bf7370a02d46ba57f7776cf1663597b9f635e6d6938a80a28b01e0dec1c237b3962e94ffa7655c948bab55ddb1633a3a08c2fa1bd7edbb6b6690f16920206ee4808cd8a6a5a7ca201c061f92104c03ad0fe8b5f4a0342a4945dc7ffb94f197bb4cba54672f09f253c184f6550f2f0fc59a1217acb12155b851f355ced271cc54d25df06aff4ad74f5ad6385bdc661265faff15d728f682861041f72e9beca5c8cde0dea50d0b0f4f41d747eb782ff2ce87b28ed0de03afc091efe8341cab23f3a585d29cf490f422ff9eec3f18f2749284fc856a57ec5d2e6e0e8fb4288b30956e38bf67039ae2e6a8d4c7d0cb9835db76ee585dea490a2ad80b575d2581fdb0500a09f808219a70bbc638ad57902474f956d783ff4c13f5cb4b14d588d4ddda1146b4b042d202ae035406330efb970fdcc0327251114e9cb8993a0294d61afd440c6b0294c2a53031ef1156edd40d7c28cbb5547966e8feee05dddeb646591dca45670feff01861b6100168c26173e1563a84a8202a4b1afdaefc8a0ab46d65855e4c4041171084eed6350359e393d80d1817fdffa49ca7d40d0af69208515b48eeeee8252fb100bffe92a8cb8a2d8a0392c4e26213fb3b894390967641c94c88ce0dba700e4baa0aa152eaa0b85afbbd336db4e67752840b9502a4b30f3951d96f5e17da73596a22089095a8140d4ca9e50412acb4f8c5e6f4142c11ad4fc9a940071785fca50d760f509ca397fa543ef104277e4a3191e62f82025159962987bdba88bb342cf966c93bcc0940cc76fa9b00d5b335ad12faff6c4698059ba0af5c872dc7fd4db7645e633d679bf6ec96acc132aaf9ac654acaae95feec3abcefa96bd2ab23cee0664af734044df04f53b11bfa9a6092a36396fed32b0a151a0ffb2a3c0d7cbed6b6538cbded34ee76387f7a243e0c827715d04f6523c8c82464d5cebda5b9c4b8adf39f1b32a5b56143fed38f2c5f68f6dd2ffa379a63356a3457f9e3fc6467bcb08fa89fb58607535ea07abedbc5b6adad6070355c7d0d2d49bdae6d0fbdc6ad5a43f0ef1ad5753450ef46871e5d0979bc19372c824decdb2d889a011dabf44a9d3edf9c5c047bc77c2820e51b25cd36fd5e337d37c78b9fea018df8c8726d3130d26e9af4d5ec1b160d18126518629af7e68d645749d62aafb9f21470962c55e7c2c037eedde1028ef7ba6166c22815c2cbab88bf654c56e690a4d964456a583b8367f62613512413c72d6b2ebf299a2b7b107018e218119608615"}, 0x1015, 0x2) 05:11:00 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x6c0e000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x182}}, 0x20) 05:11:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000191000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x2, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000194800003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x400000}}, 0x20) [ 1242.942275] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:00 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x8100000000000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000194c00003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1243.551048] net_ratelimit: 23 callbacks suppressed [ 1243.551057] protocol 88fb is buggy, dev hsr_slave_0 [ 1243.561211] protocol 88fb is buggy, dev hsr_slave_1 [ 1243.566372] protocol 88fb is buggy, dev hsr_slave_0 05:11:01 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x1f, 0x80, 0x100000001, 0x7, 0x10001}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:01 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x200002c4}}, 0x20) 05:11:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000196000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x5, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:01 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x86e1ff7f00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1243.876072] __nla_parse: 6 callbacks suppressed [ 1243.876083] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x7) 05:11:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000196800003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:01 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x88a8ffff00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x200002a0) [ 1244.100736] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1244.191061] protocol 88fb is buggy, dev hsr_slave_0 [ 1244.196258] protocol 88fb is buggy, dev hsr_slave_1 05:11:01 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(r1, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000100)={0x3, 0x5, 0x0, 0x4, 0x2e60}) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:02 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000196c00003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) pipe2(&(0x7f0000000000), 0x4800) 05:11:02 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xb0e0ff7f00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0xffffffff, "8a02fd5751ca3f48cbc9078251eb990daa38bd3885adf26a60ad04ba9f9c7bb0", 0x5, 0x20, 0x2, 0x2d01, 0x16, 0x0, 0x6, 0x3}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x4, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', r0}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="54050000310000042bbd7000ffdbdf251800000008004e00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="1c008b002f70726f632f73656c662f6e65742f70666b657900000000"], 0x554}, 0x1, 0x0, 0x0, 0x4080}, 0x10) [ 1244.803229] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xa, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000197400003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:02 executing program 4: r0 = socket$tipc(0x1e, 0x40000000000007, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000440)) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0xffffffffffffffc1) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="a0", 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="bc000000000000003f0000000bbc5ec4a9573e263da18e0451a4551ab9e019c559aaa553a92f77c20be133fc77ba6cf6db9785ec202b6afd7f06de26afc1518d78d8e2dd555de1550f48579d290e366dfc7e84048e43582b348d357c664702af678d6438721aa3e27c57a7424e285ce729493987c25785486701fb3ccaec9796c1349fbfed1e52e978a52961f306e0bdfae2523585f20a9c98b47eac82313a5d75087bd85c95fbc3ce8d1de4fe89f5ba89063674729c0d56912a00006400000017010000030000003b062036a72b94e516035788b038dc5c32dddad8ad4b8df43d62d088348877f04bd261963fe349a5bfcd57bf37f0eedb5cfd69351eb1720c295a92411e824b605b1b3b6ae285476cef50d96cd1e25b8e86af6e8229920000ac00000095010000000000000041f4157c645038e49606d38acdd64bcf6cef3cb1fb63ad962865c65ec1a0c4857d667508cc5981d36cd9aebd578af94f038ae66aa048d385875955132affcf671b4c62246d840bcd722a1f72f6288a4c0fb334f8f383ebddac4fe73652fb3f8a9b4ea4acdb4094229984ae650e603b2837b3a662b42dd0c68a09016ac49a39cd5e3909580d71832e6587a9f3bd752e5f9e0b4f101e6a076e0cb9e6397000000801000005010000080000007cc559b9f4fe47d01b108c2c6f790a0d649715bed32f9e1cb59841d3a7262eb740ae70ae3397a9801fbc7b71b94a59d9a8a0e35d8b8bb63711f9221624622a7ef8e90038075d09ff296e45a3249b0447e162f09feff1a651bc78e3aa601f50cc997ace080c8e7e204d42a5c43d00069038f509ec208fc2c840fbbba4e388c3edd19522f1f6aba77cec54871e4aedfe2314526ea01bde7522a4a85bbfe9ab13f886f9c228e85a64cf55ea21fb66287e182a5e76a1a1e17dd85c88c3ca1f2ad3663a5d9f3225b4237278f666047557b8d85245e9145f32b1d454cd612d9e51cfb533a63bb8c09ad5bba07f2a8c70141c000000bb056774d35f101c127f6be21de0027fdb6b5ebf62c3d434f0206faf899ee53f719c2cd5d3e0a4143fca789d3d3345f9dbb33395a7c7bce54c309f4b71c8c50c10fc8375f1f56c95f373213e4035d46a564ee5010b0f4d2db15e5cd831efe8dca4618a"], 0x2d4}, 0x20000040) 05:11:02 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xf2efff7f00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1244.981749] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000197a00003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1245.157799] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000dfd000/0x200000)=nil, 0x200000, 0x5, 0x50, r1, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0xffffffffffffffee, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xc, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:02 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffc99a3b00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019f000003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1245.521723] validate_nla: 7 callbacks suppressed [ 1245.521733] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1245.539652] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) init_module(&(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x18, &(0x7f0000000080)='\x00') 05:11:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019f202003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1245.607685] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xe, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:03 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffefffffff7f0000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1245.710364] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1245.711050] protocol 88fb is buggy, dev hsr_slave_0 [ 1245.719136] protocol 88fb is buggy, dev hsr_slave_0 [ 1245.724139] protocol 88fb is buggy, dev hsr_slave_1 [ 1245.729169] protocol 88fb is buggy, dev hsr_slave_1 [ 1245.734269] protocol 88fb is buggy, dev hsr_slave_0 [ 1245.797724] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:03 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r1}) 05:11:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190003003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1245.961489] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1245.975995] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:03 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="7c8686295e4b5d06b1ec95ce9cd51a4d773e59a07be6", @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYRESOCT=r0, @ANYRES32=r0, @ANYPTR64], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYPTR64, @ANYRES16=r0, @ANYRES64=0x0, @ANYPTR], @ANYRES16=r0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=r0]], @ANYRESDEC=r1, @ANYRES16=r0, @ANYPTR, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR], @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES32=r2]], 0x68) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:03 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000100)={[{0x6, 0x4, 0x2, 0x3, 0x1f661ba8, 0xfffffffffffffff9, 0x7, 0xfffffffffffffffb, 0x7, 0x6, 0x4, 0x7ff, 0x2}, {0x1000, 0x7, 0x0, 0x20, 0x13, 0x1ff, 0x101, 0x0, 0x2, 0xd65f, 0xff, 0x2, 0x10000}, {0x8, 0x4, 0x3, 0x0, 0x4, 0x2, 0xf6, 0x1000, 0x2, 0x6, 0xff, 0x1f, 0x1}], 0x7}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xfffffffffffffffc}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:03 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffffffffff600000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190005003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x10, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:04 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x100, r1, 0x0, 0x0, 0x1}}, 0x20) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) [ 1246.544961] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1246.581379] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x48, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x6, {{0xa, 0x4e23, 0x401, @remote, 0x3}}}, 0x84) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0xffff, 0x2, {0x3, 0x3, 0x7, 0x3, 0x3}}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190006003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1246.727526] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1246.782184] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:04 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x9, 0x1, 0x6, 0x51, 0x200, 0x2, 0x8}) 05:11:04 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000200), 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x9f, "62f38a9436b041091c1e1d45718b8c5d35d811a64071927586aa952019655e6f86670217e515b5f7d61d6f348fb70aaca69d522ac3c91f0b0d3638dc195f05686a30598f4a692dd5fdebbc737de3ff65466aa5e1ddf777eeff6d81c09a3e20aa8535ed46fb9101ef79dd926ff74643da1a9ccd0c5d9d170fffb0590519546eec9fe0e169acde68e9735e67197c70b2af06ec727cde6c45e408ae24b03cc114"}, &(0x7f0000000440)=0xa7) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={r2, 0x1}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x8001005, 0x6, 0x1}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190007003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x414000, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=@expire={0x188, 0x18, 0x0, 0x70bd2c, 0x25dfdbfb, {{{@in6=@loopback, @in6=@loopback, 0x4e23, 0x0, 0x4e23, 0x4, 0x2, 0x0, 0xa0, 0xbb, r1, r2}, {@in6=@loopback, 0x4d6}, @in=@multicast1, {0x100, 0x0, 0x7b7b, 0x2, 0x0, 0x81, 0x7, 0x8}, {0x2, 0x2, 0x10001, 0x6}, {0x5, 0x9}, 0x70bd26, 0x3504, 0xa, 0x7, 0x0, 0x2}, 0x2}, [@ipv6_hthresh={0x8, 0x4, {0x7c, 0x2}}, @policy_type={0xc, 0x10, {0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x1ff, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0xa}}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0xa}}, @lifetime_val={0x24, 0x9, {0x8, 0x3ff, 0x8, 0x7fff}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r4, 0x0, 0x1, 0x4}}, 0x20) [ 1246.946332] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000a003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x60, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:04 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x4, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x23, "c13c0923ee781d08cdad70eb591b3c473a8fe7197a4b6c333f198c739c1e98e5953453"}, &(0x7f0000000100)=0x2b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r1, 0x3d, "1544f4137b5576bb0da23b555478fdc9c382ee39179d1ce0551ad9c496605ff2743d371edbe34e07bdc07052ebf6c24a2d60ec6bd14f9fb86050e78419"}, &(0x7f00000001c0)=0x45) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x0, 0x0, [0x401, 0x0, 0x1, 0xfffffffffffffffc, 0x6, 0x4, 0x3, 0x3, 0xfff, 0x6, 0x1, 0x0, 0x400, 0xaa, 0x4, 0xb9b4]}, {0x1, 0x0, [0xa3e6, 0x3, 0x0, 0x8001, 0x7, 0x9, 0x1f, 0x1000, 0x800, 0xffffffffffff662f, 0x7, 0x6, 0x7, 0x2, 0x3, 0x7]}], r3, 0x1, 0x1, 0x90}}, 0x20) 05:11:04 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = fcntl$getown(r0, 0x9) getpgid(r2) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000c003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1247.158988] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:05 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x68, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1247.720932] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:05 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x404000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000700)={0x20, 0x37, 0x1, {0x0, 0x82, 0x92, r1, 0x2, 'x\x80'}}, 0x20) socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000420005aeb42e25abd65af25cfbad9a4fc601000000000000000000000000"], 0x14}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x801, 0x80) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000680)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r5 = getpgid(0xffffffffffffffff) r6 = getpgid(0x0) rt_tgsigqueueinfo(r5, r6, 0x19, &(0x7f00000005c0)={0x29, 0x6, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) name_to_handle_at(r7, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0xd8, 0x4, "5d316054df99390ea6d036857bf88fc916be92948782451927d5f71cebed339299df60fd8e233eb2f93e568edd52d37db8c16356c26710b1c8081ff9d6dbbbfa0f0a334acb5a4b70721d04e16c88edfa48b5be9a85b0a7525bba52247c0ceb36d589bc8885af1abdc0ce4a9f522a13665947569f00ec0ec00f0e2e23b232e98dac2ef19ffaf3ed0fc356dc41f54db4baeefcef9a2fe367c2aa8ef68872f3d4b281a15d12cd2bab4199266b5214b38eddcec35aea8dfc12c5df9bed748b114df727aaf62a47a848a817970f403e40189b"}, &(0x7f0000000580), 0x1000) fcntl$getownex(r2, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x5, 0x70, 0x4, 0x5, 0xfffffffffffff000, 0x8, 0x0, 0x7, 0x88000, 0x2, 0x8, 0xfffffffffffffff8, 0x3ff, 0xf8d, 0x100000000, 0x7835, 0x400, 0xac, 0xffffffff, 0x8, 0xfffffffffffffff7, 0x0, 0x7fff, 0x6, 0x5, 0xbd9, 0x0, 0x1, 0x0, 0x486, 0x8, 0x1, 0x5124, 0x100, 0xfffffffffffffffd, 0x9, 0x7, 0x6, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0xffffffffffff7fff, 0x10000, 0x1, 0x0, 0x5, 0x8}, r8, 0x9, r7, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:05 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7ce2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1491c06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000e003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000180)) fchown(r0, r2, r3) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x6, 0x4001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000240)={0x8, @time, 0x3, {0x2, 0xfffffffffffffffb}, 0x8000, 0x1, 0x9f}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x9) 05:11:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000f003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1247.830579] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x74, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0xfffffffffffffe0b, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0xffffffffffffffe2) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/224, 0xe0) 05:11:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019db1d003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:06 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) write$binfmt_misc(r3, &(0x7f0000000080)={'syz1', "0c87f8d3344613abd1b702bfd0693bd3b18b7ea860395d009fa3a4b919738c62b0c968aa6fde3a71bdf9e354b369c09f"}, 0x34) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) close(r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0xf0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0xb7, 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:06 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80, 0x0) sendto$unix(r1, &(0x7f0000000380)="f6d0b1b53a29b4b39254b78177ab8d90b4ef14345ccc9f46318949a20ec2b4550321dd428858f7a99a36d17939b2c29dc918d7e430daec8d311db4ef9344d7e5d929feaef73cdb93d0a6047d60f2feb1d6dbdf9104d1fb94ca669428233da8c6e9d618592c5e28ea", 0x68, 0x810, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:06 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190020003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x103, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019003f003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190040003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1248.882048] __nla_parse: 10 callbacks suppressed [ 1248.882058] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x26c, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1248.997792] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:07 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0x8) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0xffffffffffffffb0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x5, 0x0, 0x5, 0x5e}, {0x0, 0x5, 0xfb, 0x2}, {0x81, 0x8, 0x9, 0x80}, {0x81, 0x4, 0x100}, {0xffffffffffffffff, 0x9, 0x7, 0x1}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3ff}]}, 0x8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40000, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc}, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$VT_DISALLOCATE(r3, 0x5608) 05:11:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x300, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:07 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="1585dedace1cd6f9b9dc", 0xa, r2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) mq_getsetattr(r3, &(0x7f0000000440)={0x6bcf, 0x40, 0xb107, 0x0, 0x4, 0x7, 0xff, 0x1}, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000080)={0x2}) 05:11:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190048003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:07 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffe) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400b5004202d5b45c0f31da658ece6c00000000800aa294f971f17b1e0b245d160559139f5b5ce20e3a5e7765e9fc2b60a050526349aa2a65ad55b5c4c5739f2bce368b876cb95fd78920eacfdd88746f91edd8aa9c5fe5c40b05d9ef3d2de7a3f1bff3ca42aa50d0d88e0802a5f18418fcf614e934aeff3502863e8f97a7b2a1aeda0a761bfc5b34e20fa96658d8d98a7c0712052a9471ce13c3f028e2da820b0ff37e27193a9ed15dd8260507e20dd51add4ca58e8d38c5f49c80dbf0ed8a904ebfa2d61a770000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x301, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1249.649455] Unknown ioctl 22024 05:11:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x500, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1249.717009] Unknown ioctl 22024 [ 1249.733508] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:07 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) ioctl$int_in(r0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080), 0x4) [ 1249.791053] net_ratelimit: 5 callbacks suppressed [ 1249.791061] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.801046] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.806190] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.811296] protocol 88fb is buggy, dev hsr_slave_1 05:11:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019004c003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x600, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1249.871024] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.871030] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.871093] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.876261] protocol 88fb is buggy, dev hsr_slave_1 [ 1249.891473] protocol 88fb is buggy, dev hsr_slave_0 [ 1249.896542] protocol 88fb is buggy, dev hsr_slave_1 [ 1250.023699] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:08 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x8, 0x100000000, 0xfffffffffffffff7}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="79833bb4f59279b653765f371e4b6d2011d2df11a644dc768f5fe2b1e221753c7261eb9897d2f3ad5daa695f5ff4fe49bbd0c0fd23e661265ba6b9128b3506815769abf6b22633d0af12eeb06965e531b72eb8d44448a8f82dc526f6ec9cb4814b035fc1ed3db97c7b12a121e861f658ded64e92ce0d5c2b621c291cdc2982fa7fee04767982088942bf29ec390f682bf0ce6dc53e383ae955d8a6823dd5021b"], 0x4240a5ed) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x700, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000080)={0x1, 0x4}) 05:11:08 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000501004620f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62cfb66943b7b9522c37eca08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb15d27e3995b8a61d4a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400300, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000196558003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:08 executing program 5: socket$tipc(0x1e, 0x0, 0x0) r0 = getpid() rt_sigqueueinfo(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1250.601335] validate_nla: 9 callbacks suppressed [ 1250.601344] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) socket$l2tp(0x18, 0x1, 0x1) [ 1250.658475] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xa00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190060003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:08 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="620001010000fffffffffffffff8000000000000227613c4868df2cd639d384c6f2bbd4535ffad7539b2bce67cb7f1dcb9bb01939fdbb407100e"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x346) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f00000000c0)=0x60) 05:11:08 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$RTC_PLL_GET(r0, 0x801c7011, &(0x7f0000000080)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x130, r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000100)={0x7, 0x3, 0x6}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) [ 1250.840336] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xc00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1250.900535] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1251.039072] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1251.054218] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:08 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000100)={'bpq0\x00', {0x2, 0x4e23, @multicast1}}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000200)=ANY=[@ANYBLOB="666968746595000000000000000000000000000000000000000000000000000800000000000000002804000018010000300200003002000044030000440300004403000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x474) 05:11:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000195865003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80001, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000140)={0x0, 0x3, 0x3, 0x3, 0xff}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) 05:11:08 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x80) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000140)="c382e32c7a621605455b8258dbe668be48c1672adee987a16ffa108324f6440d93e6c4fb422899fc50ea044836f4b76ba9dce573dc2926665272f78b67751abf56f40c1708b7044b10dfdab7539fd6dc8cb54bda0619cb3f697b8a05440376424eed8369ff8015285a4dde743fc5824a83ad531b3ca6f9c297a47822b2067a0f892442d193c29b83c2695454e6fada877698800080323d782e7f69944046e53d1a3c5fb6a8cf5e611cb878d20a62e03913d45438e86ed4674404be99cfcaac9ed06f08c6fc6cb2900bfddc260a7c3d900d5cf860e25363ca3b9ddf005672de912973c747", 0xe4) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xe00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x3c, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x90) [ 1251.602171] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1251.633341] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190068003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000100)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000380)={{0x9, 0x5, 0x6, 0x7, '\x00', 0x31}, 0x1, 0x200, 0x100000001, r3, 0x1, 0x10001, 'syz1\x00', &(0x7f0000000140)=['/dev/infiniband/rdma_cm\x00'], 0x18, [], [0xffffffffffffffc0, 0x3, 0x9, 0x80000000]}) 05:11:09 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000380)=0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000200)) socket$tipc(0x1e, 0x9, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1251.811263] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x15b5, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1251.851507] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019006c003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1251.940896] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1251.994135] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:09 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x5) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="5cf952030cb45b3179572d15096d8f05e5fc935a1f89a71feccd0318eac31227248b3dce0a411aece5e6bd6de6f2415851dd6a77ad551bbf5a132abd138e665fa195a9ce5e6699183d009ecce935ff06b0c6aaa7eba384c451b1940a850bbc") setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) socket$packet(0x11, 0x3, 0x300) 05:11:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x2000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:09 executing program 5: socket$tipc(0x1e, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x3, 0x105080) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) socketpair(0x5, 0x80807, 0x7fee, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000005c0)={r2, 0x1, 0x3a2, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400090060421e75db52000000800000006bf1dcd0000000bf0d316812d59c282a9f844318c366c580de23a6d64909b0b45fa5dc512e3b22efe00d1d3df4bd796332185b16d5f7c3a425cb2d00e4966a77b7fe6f0a29b0ec74cde7b6a7d678424f2a17f6a58fd391c6592a10c1201a8b1911174bf93af3ebb923e685a0a7fe123d6dac6c154a803620705504199b279ee7d8f9e8b07acaca73153a1bf9e43e381017b8c3a35ef8efc1c846441d5fa77e5f44e1a623368795b7ffa8e21aaa43265057560133eab53c7fc58fec47dc328512698435dc5fc82bcee04efce43c615466000461c467adc33d08bfe831e63101c1b58a40ec4e4cb03ae9631329757441fab29e78f72e62a280a2045b0ab41d4b8d6eec160e9092d700836722cc2ac1049dca98ebcdebe7662966008c20c702826256504fa95023adcd8c7ea10e8a9bda0a7799b230593165f389625a55f66681153086738aaf09dbb3636d95ab35050cc3afcf446ccafa9ba73e022da7e7df737416398216e04aa4c63fd90308fbd7053baa590e250ce4ca752501f4395fe3ad1d"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(r3, 0x0, 0x324) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190074003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:09 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(r0, 0x0, 0xfffffffffffffd8a, 0x200000000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x3ff, 0x1}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1252.564203] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1252.584143] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019007a003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x1, r1, 0x0, 0x0, 0x1}}, 0x20) 05:11:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019f57f003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1252.715693] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4800, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = dup(r0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000100)=""/246) [ 1252.826462] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:10 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190081003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x5d, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1}}, 0xf) r2 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r2, r3) 05:11:10 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200050100000000f700000000000000f1d86c54d15905000000000000003856416622c646c246456b4da4f3523ae0585feafa5926e5b6553736faf41bb8764b1ac99ae16558c948de49cc1bd555846a50a30676cc95cf0f7faa25c3692a2a58ff771de762e487"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) write$apparmor_exec(r1, &(0x7f0000000200)={'exec ', '\x00'}, 0x6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:10 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x16) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0xfdfc, 0x1, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002e80)=""/4096, 0x1000) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x5865, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000191ddb003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:11 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x84, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:11 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd, 0x0, 0x0, 0x1}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x7) socket$tipc(0x1e, 0x7, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:11 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x6, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900f0003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6558, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:11 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) accept4(r0, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000600)=0x80, 0x800) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000640)="68ec37ccac72633f24015987b9d2b1596b4e777c763387c1e6e7546fada2e8d3967bdcdde51f5ae833b47e859974c2b5e7e1b607cde37f6606c413a4343c5cad419ae0e783508dea6004d5eaa11f0454ddd8f4ce4f61", 0x56) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501000000bb000000000000000076ff2c20543803c69435ba8569bbfdb70479f189c194057da2a92e128d89b9e232d9b4566320dade80325f1f26e44335b174368eee4c57dd1be6e1728aca568310b7132e4ac9d27d4e2d4e581688d1f57512ac520ca2dc004192818dfd32cd28c2ff58fe2bd1dc81ce378140d06dabd0410f510a2d702947d18b14a676a2e4307b0db786d8c7f340f11241728ecee8cf7c7fbce790029354"], 0x14}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x3ff}, 0x8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1254.570130] __nla_parse: 5 callbacks suppressed [ 1254.570141] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/239) r3 = getpid() ptrace$getenv(0x4201, r3, 0x3bb9, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6800, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001902f2003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:12 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4000, 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000380)=""/211, 0xd3, 0x0}}, 0xffffffffffffffde) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:12 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a883a43c663"], 0x1}}, 0x0) close(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0xe9, @empty, 0xfff}}, 0x280000000000, 0x4, 0x101, 0x400, 0x1044}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r3, 0xf69}, &(0x7f0000000200)=0x8) 05:11:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1254.767839] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x3c, 0x0, @in={0x2, 0x4e23, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:12 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x0) socket$inet(0x2, 0x3, 0x29) ioctl$KDSETLED(r1, 0x4b32, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000197ff5003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c02, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:12 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r0, 0x0, 0x1, 0x4}}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xc4000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x1, 0x4) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 05:11:12 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000400000000000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x3e) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:12 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfff, 0x2002) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x1, 0x0, 0x56e, 0x4, 0x8e75913, 0x6}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r0, 0x0, 0x1, 0x4}}, 0x20) [ 1255.523310] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7400, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000060ffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:13 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x4, r1, 0x10, 0x1, @in6={0xa, 0x4e20, 0x4, @mcast1, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r1, 0x2}}, 0x18) prctl$PR_SET_PDEATHSIG(0x1, 0x29) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) [ 1255.659441] validate_nla: 9 callbacks suppressed [ 1255.659451] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1255.686582] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:13 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190002003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1255.841530] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1255.875314] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1256.031064] net_ratelimit: 22 callbacks suppressed [ 1256.031072] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.041214] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.046326] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.051450] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.111136] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.116232] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.121116] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.126404] protocol 88fb is buggy, dev hsr_slave_1 [ 1256.131548] protocol 88fb is buggy, dev hsr_slave_0 [ 1256.136602] protocol 88fb is buggy, dev hsr_slave_1 05:11:13 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x38b) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @loopback}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190003003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8100, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:13 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb8842000000000000000d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:13 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="33b72b04171f7b02000000000000000000000000e3a8ea5e153ff700b74a1c915682be9af505d828250c5c9ec1bbc5c282407c12e0c27a142d8c9de04e78549d98ced4795b5fd4e4d3fb1d70784dc61f3a6c6c3b7afaf6f83a536e919747ebf99c96a479dc59778c7680a125894660b65019af84d70fba4842bc3953511c35000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190004003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1256.529123] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1256.547083] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1256.568103] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:14 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r4 = getpid() ioprio_get$pid(0x2, r4) 05:11:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001a80)={0x0, 0x7b}, &(0x7f0000001ac0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001b00)={r2, 0x6a, "fa07de7eb576f4d5b5126e0b55089d670e83f998b761a108907b4b2ef7f9b7a547fd99ab9674236db6be45e911cadc40481ce09c3c45d8392d675e1b177706fa93bfbb34892bcbb4f711209c4674592e4eeabee340c6d3cce8f6fe6bb380f8b0960c6d77eebca24701a8"}, &(0x7f0000001b80)=0x72) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) 05:11:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xb515, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1256.678995] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190005003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1256.736567] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1256.788992] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190006003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1256.859863] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfeff, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x105000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r2, r3) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1256.999700] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1257.015529] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:14 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000007c0)={"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"}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:14 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000380)={0x0, 0x3, 0x3, 0x100}) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="142732ffd0729161196f4a14c7689f21810e936ebfad1b650a06f89155c8baca6e5b3792f511ac83ff6f13c74a475dc447ee5771111347f142f75c1bd6e32645706fdaa9565d878c83d17d5334709a9fdf2534d85e0237d32187345b1d2b838d8e03202d436f13a092aea4bb2cac81e06ea57134a7c81be08acf20e25d1095b0df472c1498e10eeae96d742d0a5484c958f84aafe49898948bfe0fe24bac2b4bed3a9aea15b42d1415bffe38bac5823f64ffc2094d1b06630db3a72901e04dbb137336799617b0cf20968c396c6dae"], 0x14}}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x400, 0x100) mkdirat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x1ff) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x286bfc, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190007003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1257.435286] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:15 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xff0f, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x85) timer_create(0x7, &(0x7f0000000100)={0x0, 0x5, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_gettime(r3, &(0x7f0000000180)) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000080)={0xefa, "f130a0204f8e0adfa5c94ebe5e9be08feec602b84cc0f3281c377100cff21ea0", 0x9ecb76c7eb082246, 0x1}) 05:11:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190008003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffe, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1257.598658] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:15 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000380)={0xef2c, 0x6, 0x3, {0xf, @raw_data="ad3c25a42aa3e755683fed63ffd8143104016e33f904c7f1a268c95ecc28040b0e3d5af58bc1367cff49e09d8d1c627442c7bd9af399885e6e8e80c7b5d753a3b5c14047714a1dafb287f00cf2d0265e1e683b743145a8e8720bb6fb8762d1199342011d1a26b353e25d08d31b8e03410d72d41a7c8e308072981821a9e50c5d70c74de2de55de62e8a9e13a027fb416fdbfd897aca10733df6d737ee3956d4ccc260d1862ad64502fafee0229abfc482d69c003be18f3bad157913a2da6bc0ae4c6dcbd3b41eb16"}}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000500)={0x2, [0xd6, 0xa9d5]}, 0x8) recvfrom$inet6(r0, &(0x7f0000000480)=""/89, 0x59, 0x20, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @loopback, 0x36}, 0x1c) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r4, 0x0, 0x1, 0x4}}, 0x20) 05:11:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000a003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000c003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1257.758241] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x280, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x1, 0x8fd, 0x4c1, 0x0, 0x3, 0x1f, 0x60f, 0x800, 0x401}) 05:11:15 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000440)=""/147, 0x13d}], 0x223, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0xfffffffffffffffe, &(0x7f0000000080)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x43ffe, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x5) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:15 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x34000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1258.366084] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) modify_ldt$read(0x0, &(0x7f0000000400)=""/66, 0x42) r4 = socket$packet(0x11, 0x3, 0x300) fcntl$getownex(r4, 0x10, &(0x7f00000003c0)) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fsetxattr$security_selinux(r3, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x2) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xd5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x10000) write$P9_RREADDIR(r5, &(0x7f0000000180)={0x13, 0x29, 0x2, {0x5, [{{0x8, 0x0, 0x2}, 0xa4, 0x5, 0x7, './file0'}]}}, 0x230) msgget$private(0x0, 0x100) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 05:11:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000e003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:15 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x402003, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x401, 0x6, '9P2000'}, 0x13) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 05:11:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x40000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:15 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x3, 0x6, 0x94, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x6, 0x4, 0x9, 0x1, r1}, &(0x7f0000000400)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000000600), 0x82, 0x0, &(0x7f0000000640)={0x0, 0x1c9c380}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002a60711812b7500b697f1e0052240000000000006e18e914590f054d4a64e44acea496ca"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x218002, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019000f003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x3, 0x1) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000240), &(0x7f00000002c0)=0x4) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fee000/0x12000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$bt_hidp(0x1f, 0x3, 0x6) io_setup(0x8, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x8, 0x0, [0x6, 0x100000001, 0x9, 0x8000, 0x7, 0x4, 0xd, 0x4, 0x0, 0x3, 0x6, 0x3f, 0x3ff, 0xffffffffffffff80, 0x3, 0xfffffffffffffffd]}, {0x8, 0x0, [0x9, 0x1, 0x5, 0x4, 0xab, 0x5, 0x5, 0x8, 0x3, 0x87fb, 0x4, 0x1ff, 0x101, 0xbe, 0x6, 0x3]}], r2, 0x1, 0x1, 0x90}}, 0x20) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) 05:11:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x400300, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:16 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:16 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$inet(0x2, 0x400007fffc, 0x10029) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$notify(r2, 0x402, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x8001, 0x3, 0x7, 0x8a, 0x5}, 0x14) 05:11:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffff, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190010003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) 05:11:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:16 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000080)={0x2, "4cc36ed343735f855287bdab05a2478d4e3beb9012e8a27f5d86170d0711981e", 0x2, 0x0, 0x0, 0x1, 0x3}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:16 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000ac3420005d5a01101000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$void(r0, 0xc0045878) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190048003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x100000001, r1, 0x0, 0x0, 0x1}}, 0xffffffffffffff85) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000001c0)) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000100)=""/171, 0x7}) 05:11:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019004c003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1030000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x440, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0xbd, "4c7ad9a435598aa1d006199052ceed6a2b7ad0da460a5fdc3e6684e3674839647ea244b0716333867d51688e14e4ef58722da974a8018e051d9f54b46522832d64982fd8ecc6cf8cc2f4f2e26ae0f8a4bdd508c3c9ba6563a94771484d5a81debe0ed5b31ce3e85dd699c0d8df08286da09354947490105046d23a3af017d72551237de7a9967020b7d8315073d36932f94dca428204bb64859dac40a64f69abca223c1f770830f9d0d2fd4f8cd2e7562164728eb32557505511918465"}, &(0x7f0000000200)=0xc5) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={r3, 0xfb, "58ed76fff2bffbbc018d263d2a99e48e1aabeb6b59bbe0c34d9f59de6d1d221fc491ae426f5066e8ada615dbd212218f2307d86306b5093bd128f0c6513104b732c2230620409aa019480a0c851ccb995579d02eb9ebd9734932a6fa5b2e7c58fd7aa80f79a53ec49897272424c815d70557f68b5f7e1959fb0a387e9f97d07193438c31dda72f61fb36806260144c27f8d332c55a0e0afdbcf5bebe885c3c817fd39ae8bf339b59d29d4e4d20933ca6c077f74895a4e8ffd15a060061424f906a7b93cc928a18f757fe1e1736912dfcfb50ce220a1124a8aee2141cf5d4d452f04142c402c9c8231d877c44e1b03902ce1cc7472147074b9560ce"}, &(0x7f0000000240)=0x103) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x4, r2, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r2}}, 0x10) [ 1259.616746] __nla_parse: 10 callbacks suppressed [ 1259.616757] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:17 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x0) r3 = socket$inet(0x2, 0x3, 0x29) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x22, 0x21, 0x8, 0xf, 0x0, 0x100000001, 0x6, 0xcc, 0xffffffffffffffff}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setrlimit(0xe, &(0x7f0000000140)={0x5, 0x5}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={r3}) 05:11:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x2000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x141000, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x1, "5244609f564d0bc7eaf69951d3a6f9d35887defdda0b3ae39fc9f7a104c7e3cb", 0xc05, 0x6, 0x1, 0x16, 0x2}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffff2ef7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x27}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0xff09, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190060003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x20000) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000100)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x1b, 0x15, 0xd5, 0x0, 0x9, 0x0, 0x7ff, 0x1000, 0x7, 0x1000, 0x3ff, 0x70c3, 0x0, 0x8, 0x0, 0x1, 0x3, 0x7ff, 0x5948}) [ 1259.859268] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1259.885710] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:17 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='bridge_slave_1\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="631303bbbd4800808a6f73ad70a2b65cd32355d0990e", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2, 0x7f, "23bf8fdc15514ea60b06a17d755dc5a6c3c636780ae292b99d75c835772d44ee7eb82a67229b41590a8e8692796d089cc57cf88e11785b7715309441d120de4e5b7d4875f755b9fae2145b090ad8604ab84ea06ba6df2910c38ae620a49f2d72b4670e2f4a5f86df5cd7578d1f59440538ef122997fd6bfd0a1ed68f0b80c0"}, &(0x7f0000000200)=0x87) 05:11:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190068003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x80000001, 0x40) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x5, 0x8, 0x7, 0x5, 0x4, 0x6, 0xb44, {0x0, @in6={{0xa, 0x4e22, 0x7, @local, 0xffffffffffffff3e}}, 0x2, 0x1, 0x2, 0x847a, 0x6}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={r3, 0x1f, 0x2, [0x1, 0x80000000]}, 0xc) 05:11:17 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000006380)=""/4096, &(0x7f00000010c0)=0x1000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000002480)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="220025bd7000fbdadf250700000008000500000000124e42f9d8814c5800080004000500000008000600ff7f000048000200080002004e2100000800070800080000000000080008000300000008000b000a000000080008000100000014000100e040000200000000000000000000000044000200080007000900000008000900fcffffff080003000500000008000b0000000000080004002908000008000b00020000000800080066630000080003000000080007004e23000008000800f70000000800010001000000140002006966623000000000000000000000000008000800fc00000000000000000000000000000000000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r3 = syz_open_dev$sndpcmc(&(0x7f0000001140)='/dev/snd/pcmC#D#c\x00', 0xcac, 0x8800) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000001180)={0x0, 0x6c}) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x80000, 0x0) io_setup(0xfee, &(0x7f0000001240)=0x0) io_cancel(r5, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000001280)="35e7a3199a69f76a9113190648efe61cdb350960b98dcfd61987f492a1d3bca73c340678aab08416ec2f6f5445032fcd4d2a46f7456949ab49169a07bbc54e5a602f23b85a4df4c1d2e8899cd3555c75242c1bde31bb405bd86c6705e41b3c", 0x5f, 0xffffffffffff0000, 0x0, 0x1, r3}, &(0x7f00000013c0)) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000007380)={0x0, 0x0, 0x2080}) recvmmsg(r1, &(0x7f0000001000)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, &(0x7f0000000540)=""/175, 0xaf}, 0x1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f00000006c0)=""/195, 0xc3}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000000200)=""/27, 0x1b}], 0x8, &(0x7f0000000a40)=""/32, 0x20}, 0x32f77f4c}, {{&(0x7f0000000a80)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/24, 0x18}, {&(0x7f0000000b40)=""/190, 0xbe}], 0x2, &(0x7f0000000c40)=""/142, 0x8e}, 0xb94e}, {{&(0x7f0000000d00)=@l2, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/85, 0x55}, {&(0x7f0000000e00)=""/215, 0xd7}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/92, 0x5c}], 0x4, &(0x7f0000000fc0)=""/64, 0x40}, 0x3f}], 0x4, 0x40000002, &(0x7f0000001080)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1260.381499] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019006c003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1260.546289] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:18 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000001440), r3}}, 0x18) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r5 = syz_open_pts(r0, 0x100) ioctl$TIOCNXCL(r5, 0x540d) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x201}, @val={0x1, 0x0, 0x9, 0x2, 0x186, 0x7f}, @ipv6={0xffffffffffffffff, 0x6, "9fb591", 0x11df, 0x62, 0x3, @dev={0xfe, 0x80, [], 0x1b}, @dev={0xfe, 0x80, [], 0x22}, {[@dstopts={0x3b, 0x14, [], [@generic={0xfffffffffffffc00, 0x20, "853308bbff7b7729e40e6d1f7d7b221a779fe8b12f968008372da8e07e14e572"}, @calipso={0x7, 0x20, {0x100000000, 0x6, 0x80000001, 0x40, [0xbce4, 0x80, 0x7fffffff]}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x8, 0x30, [0xa1b, 0x18, 0x3, 0xffffffffffffffff, 0x0, 0x6]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @pad1, @hao={0xc9, 0x10, @remote}]}, @hopopts={0x2b, 0x20d, [], [@generic={0x227, 0x32, "7aae4163ecf893352f77b8c66b931b68beab342fedff82d42b8e8830921931559dbe1bad6a9b9cc62a0c78c8aa6d141de745"}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4375, 0x1000, "2104924c9a81378761a89faa6e90602b98c2253b0af40d9d5d03ac78f6289a9e57b70827c65aa03c2dc6b37b2afbcfa9e8578f4ce16fb2f11942ca8eac9a810f8e234250fe298780564d82748b6fdc0d51e97bf15da392a0573c30be87e28a4e7cfd346660f8bd213b57201c86b0293df6647f8b4c8b529d3026219694bdfcd3b08dcd06ab27c2801a040233c019e7c11daa66766a9cc94b8d3794e1710632362129f141539d58e9f04c5d32a961ae551f2541f50a5e2cac09ff1727e8738602f1595c8c23eaa5c2e0495ff33329a37f02fa222453fdc4ebabfcf1642550609cc67894d4f430071201be7ac83ceec575f330410b0cea7da8029380355f6084146d6069cfa4f5007472c6aab8bb192e3788e6454a997b0b959a023c4b10dbeab2fcf25d5bd6176257239dae2a1fd517902cb7a3ed2abcaca342e7fed4fd5b4045e7ea1ebdf0cdb0466f9274c2c3ca2198c48385777f74031e9fdf2deaafdffa7bc2e3018a9fc664c2f430331baa08bb1315e1495b41aa5655e59213d0270d1078bf1374defeff04c409f67e411bc8c6b8d32c04f7eab994e1fd95271caa5f0298f0b42a6fae9744a9c9a11d06177871dce93745836f67a69b6654d184225cbc00d9fc9ac725c15bddfb4bd2dfebd26bf5d080e9c25ac84a58ff5665c5e6f3a9c2ff2bb62517c6cc1e7dd64d4347daaaa6af0d95e3a7d662c766ed39343b75842dac354ae92f39ed7f298b5290df576c5f8a07cfca2b33b0ec3025e2a2ea36c76f9b75ded980c9f3c35c059657b4cf871ee1eaf2df3001a6eb88b6b6df80bd94333d965340b454c8246bec5512f1e5a0f6ab686d2045da3a39cfa26cf73e186b429d56cf1ff9b7fb65c73e899c7b100b933de71f0c7ead64c2c5a0a82a4444a613cb1e0810b5e2e6841b980d3eccf6b7f8d04f60564db1f11d07d3842adb9cd755db167c03207139eb2f8009b28c866c53826ca5881240379ce6fa60a4e8a1c6eeda1d9da57b2d89e1f2877057354c99b3655888e753785e8b041de1679ce8a61b839d8695e91d48645c028925decdb4c66c65a120c1e0125a5512b8be4a7a11cccfa04ee980ffc05313c31fe396eacaa352ee2a55475ce6f67f40b23a03665a5db9e794f2b5d0f69136901816cc8eb5c96abd9932d744b49ec04e6abba7146b4d9776bee6103814a8a9027ff3cd453288647fa2602b32fdcab8eb22b47376f90e5715381215464facff7a5a28106d4ff429e3a1689b044c9567038a9a7765c308859b43f523e005885f74cbc7005cd4d2cb6f0c33cc6285286b196d0b990c3c9ee3ef0c5123fdf861af7b9648f5fc349cd8608dfc772490d9ca5c6ab99286022f3783f6454f77022bcc1a160aada4b5dccf2479df4fd2826e730558976545c558c7da3687e7573c6781825efc2f62a079478894704e7efe46f9841f3385e166a57a96d450b8068adcfc7318cf37bb57fa031524bd50279b27a7e448423f52eba39fedb65016a239e242521f9e0d6e5c2adda2a9efbbff28f5e79b55ff097550b4f421e3b0f8a36332750e91b29652bb1a5a2c5965bd72ff7a96e337ba695273dfbdaf68d29918b226560b7b010cdfd6831626df6345c6337fd1e21c455ed7ddea6908bc21318fc8a99bfd5b3f69fe83a4f2787a74f6cacb8d3e16534b85958f12691eb0c0879487f015c02c5ef03903e707500f512b5d37c7031c73d560603fd2f2a78086b3738a581854f8e6c99e194017568f74f3b339c8cc75455b4f53b781fad7342ec136569e068143258e1c3d95a827308438d874433b05ac3a9907b77c8fc48bb5e288692ec60236abbaf234e811201fe790efa270d75c170171fda93218a1bb9fead9088dae173b7d8ed80651fc28d409c8752d3dff24b9bc86b38ae0c86437930c036385f771c134cdbe3bbc1a9642a5900afeb9442dccdb2ca71e8abba815d9657dc5123eb5c6cda533f5c6cee804af2e800f316609457e68673d8f6aaa1994343b576910e9f8e8d414a147a8023a9466e62e88f706b90354d44c1a1ab05f8aad0b72758fbd0a2191b71df4910c7fdcf3845f40db37759fd5ea485afd3f6225987a0a36415e458442b05469b5940f1c8b0009f25ba2ee704b8da69fdb5b4bb355f83b993c983c46b7232683f1060b0191465ec2b7738ddc31caba2085b4785482313924bfd24ea236cea38fdc1dc003da7261348b31bbc832bd216b6c07666e5f931b6f8bed67c5a527da785691800b716d477b9306aea0c25331cd2b33afbb6004dcaec05d21e91e272dd2685dd486110b495c0a16a546153364b653eee6faab1be7fa2c5dfc049783a2229fdf66660000a46cf786f8062090d795b384381a526862528385a753edc4921a32149ad4945d303f0566e9025e24c895698cb33238c919a39689b850550fefa74773161dfdac860859c77873740597dba3f9de19f5a5abb64b5639827fab6d5e81dda3a8eccbfadb195ea3a45c1f9bbe7172b541ab53aaa4efb7e1576fcf31981856cf427d21867ab090e3c1db47368fa1a2c7929519367483e4d27d1635b2c1719505a4b2b9f83c4133a7ae0276a096375da4747664ca7988831885674cfd39c2fc7c5922985be8e4d149b6185da8d4508bc04141c80b4efdd72b3dbc00e9d9f55cb7e894d44818b46c98baf1d6a3bc96f413b60e7b39105f40c15f384a1c76d772d677e94e8cbe56445e6e0241b5bbc35b7f5140098e5383320386de26e2d3bd888d008f80a661763d422e0678a45a7e6aa7a6d7f7e328b0c69ab6c09ae1e22cab31433d36825dd16365e5f7749aab4f5d4d7b9bc2bfc4be20941da669cb66c3a8a90d9905d611bf91d5a1e9bc3bd8099a71d7e343350bc5114778b8fd6743c0ab061b28dadca1aba9ba352cbbea4c4978e07c4df0961637bab27579f93cc79c207eba17f55912abf983a8675f8faf01d4ba9d1fbcf03a9b86b7ea5e57df562a477a2f758056261c76f463120decd9940dafd1525e329880211700d93ee09adb5b8c52879f8ac3c28ab45d0777216f8d6eb13919cef907ea020ecf88946680da57f8ed2870afc4421b09f41d5ab6887d3de1350a05be17abbe090395dcba0c4c4366f1be8885215a32d3c6da10f40d076c44ed056c2f66bf97276155334a0db853f0b9b12154ed3f560cb0e9245135d113a5dc5f2430aebace67fc689a963a8bb6c34e7c3f2fb64ab626b4ae7eff7eeafbc2fc76fb57599766e4c3667bd76deca36e063414833a71ae14a59c8192d0cf73de3fe5417d732b64f910451c6331bf5f95de29d4f8f0ddaf2d267a11d4dfc17a39735fc3aba569e57b0253d5be108ca57ca6691a9709983f2a1309f91551c9e08826831f2546ddfece633244a6042f63502df2d8d8e22964e3f2480fce823ca3ee226bbe140ea89408cb92b9399204931364f3110b3a3a92b11145292b9ddd7ecc6f52f3ea37485aa170401b937884fa9603ce66eda3e8f47421613db10a970d85a7b9cad782f8866f90c7c4eae96abe54d8c24d85e3d357521837f8f0e102cc09ff35eb32b32d01b645fa069a28a8a78a8e2bebe287f3183c693d1e555a950a0704570a93b3e94e3d05db9052bc0777fc527c1d5dce97d995ea3c0bd656d8944a46fd173c34000b64d43f7e64bf7b01b71c75689e4fd69049f185dfc7b38e0ddb30a0e898b71072cdd490467798876b88d37936d46a363f8665bf8fadc8abfe7d5fea9e255d1bdfb7e310713dd6fdd0fcb10060c1d0f09834fb1f1d90ef7d10e09e1d89ef0f9cdbda5dec85d76aa3bb5d0617c5d1c0072b3d702a22693a66bf313220e34ba6c1f17c1069257f55e458ad41efa81a07ae3dbeb37d2cf4278634cbe96100fe6dc4fff54e6042d88c66235f0d47448e990dade37708e83378571cf86da6bc546fe6e227daac9e78ca39faba3270e4b074ce37f5d39fb18f186589dd9494ea028e45fc1cd146f82aa29dfbfbc68cdc2cede6bd151816cf9e59294b6501bfab831d66be3bea1e86188fa9c94efb6851057c8a0dbc4ef990b336d220dd1641a517591e3e8db28c1c195269525b5770d09fe36d37267c528fc462944a67ffcfd08f6cd11a02ede196fd9a6c1904b2746ed8960b2f845365a3410d49dc0fe1f27ed3ec34e9a97917824e504e13ef09721679ccbfca02546fc16498e5dd2fbdc9c36a3aa5822e9146e933f5e0e3669b4cb8ede4e5ec05850a7f7748366d7f316114eff7057ca1f1f82331248bd661bdc13ae227d1a7f23e5e2ec4142f5546cbcb5b52362e15787631417b380c6a80eb7fb1f78f0298f46c03d83c564805690c265a1cf9cf6fa735ee33291412fc8cabfb818deb83b91e7e0ff703c2af22a2b491645f2573564edcdc00b808177d24274e448f5675b8d672e20e681b5bb2c883e79a04327d4053b65494b95bde5caf0901242d0a725aa8cad0e176ae5d7157b36103838931ab3c020ca44bcbd9909de41c2c9f274567053ff8b8ecd52fb66001cab1a3d9a16f04c4d2c962bd0e01f8844991cea97c7ddb2e59df35dd5d294490f10acd8a3f8d9f939ae659ec046eb0a8f39e2ea1792ce8ee20f4b1def35d425139711509c39ccf15f748567419321e7f9122e4df903a77c00e8813ae356b747e46b04a7f03ab05dfc3359968d08d5b5e909c1b59626b86a2989a7be2f73d9da1cfcb57b8807ea95e92832e21aef64759b54061ca368e232561e35bb048dee6eeabf9ef51eb79077ec0e88369e60e2fe9f91ffd6cd257cd56c50f78102410ebcae4a3b476399c9383115ad8a11615e53868970fd36a7214f268e3ad1fe4bbf143f304b273068f2ceec3fb8414a95938e48f8df1694647c353d1aafd74173f925c8f9f4905e5815123c61147959e7eb2c853cf2d2de75ebdfe5585ff35deec183a2a60eaece8092f674b72329f30b881b46091ed3bc16509f2225f48ee376c6d7f78830a00bb7c19c9841d8e1df8f80fb7c01207213848f034b93956a050281311fe640f19c93ab48e435dd962c22475e694c07d0a4a060074a028ce7e45ff4a2521fad7c0dc91fccc8bcc8f5bc55ed9e959bcaf3ca58604b3dd09cc648e2d27a86da4376746d77f1b499308e786a99ba7298e21c1f9deb766ad85fdb3bf2cd9fb454b562c824acdfe974147847ba5fb6b7cdb32b60e2d09975b4db021a680220b938490de4311a7022692f7c01b7166ecc580ef362c240d3ce5c6bd33374c0ec948eeb264bf9423a0538ab315f23b67e0a11ff6bebebbf333322e2ca348670199625802aa6e3a1511920ee0dd918df6195e586a5d4690d40049c2218f10876be2b8e41a1fe6fe6815966e2b227fd45089ac17aa5067c1bb118170f3bed359fad96863eba9903d0cc2fe1cf664a149ac5da2cc0e8c97a4690d6d793a368c06b467f1624abc97e9999b5afa15d2ecf5a73ec34f9c50edc47f1dc03daa83b908af125b6fc572d9749cfbfc337ee596adadb9cb5183c8a2bd988da45d413d53fa28e258730e256cfebd7b9b46edcd411a8a6a9860a4b89708ec669913233fc21846cb36d493b334b78b9b1a896e5f17eed9d74bf54ec76c663709e682423f9e016012e6b4d2daaf34a3ce24692fa342673507e9455a84bb8debe9b0cc9bd825de054b835595305b513f058e0bd042b92da06a31712b6c1c822d7df5402dc59983d1e91e11cb71ed737e97fbcdd6cae8496cfb70a94d6166aa5139c094e342611131e029f51d90d1b8e48223c905913c86214da89590d3074d3b6147fe51d451b983d7bd8db8f795c60cb47fa0196bef0dba15f8df9d0b22a0dbbcfba3e94c"}, @enc_lim={0x4, 0x1, 0xd63e}, @hao={0xc9, 0x10, @rand_addr="5aa37cc8bf6f246290febbc9a9553452"}, @ra={0x5, 0x2, 0x9}]}], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x8, 0x9, "0462c8e1bda3d67d582b6d725ea46ac532cc8b40ab656f21804994d57832296fe99d9b02a087e6113839386b69a5e7edfd8d3f96467b835d959eec82819cee69c8e93aa989a10775cbb8679b5153221ceecf1c627b523f71dcce898c822af851167d21498226b60ba35e64e89a523f2c76c3db3834eec2506e7ec485530fec0049370070966a0d47f896fab0635db8010d16f712b4ea220e0df68a4aa5c474aad67ec9f2d2ff20b4db4cc5ec17b04f6c4ef93e1f84a5aa3fff0d1c5fce6f28"}}}}, 0x1215) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r6}) 05:11:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) 05:11:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190074003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x5000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:18 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501000000000000019641cc0000ca58e3a08b7034b20ca573fb6b75f153409b4f723b4607f7da928cca76e295c435835bbc83e9fdd2a68c36a69f0558258dc59a5c1e80bbed"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1260.793732] validate_nla: 8 callbacks suppressed [ 1260.793742] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1260.831219] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:18 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x5f, 0x7, 0x10000, "499a466154f3cd847cbf032860d01812", "8d4be95c8d18f99ae7257e9c8c43edc5af9b5b864226b242246db0b1b9420d1e6269e0cd676249841b90d528999cccf299df93c441f8d4feedc31eb57e69f5408630d3d28b3fd14de3ee"}, 0x5f, 0x1) 05:11:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019007a003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0xfffffffffffffcaf) [ 1261.316133] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1261.325804] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900f0003fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1261.485142] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1261.510691] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:19 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xb) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0xfffffffffffffff9, 0x240841) getdents64(r2, &(0x7f0000000200)=""/253, 0xfd) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) ptrace$setopts(0x4200, r3, 0x8, 0x100040) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x0, 0xfa00, @id_tos={&(0x7f0000000040)=0x7, r1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x65, @rand_addr="bbac161e939da2b19ef9952ecccc597a", 0x100000000}, {0xa, 0x4e21, 0xbfb, @dev={0xfe, 0x80, [], 0x2b}, 0xbbed}, r1, 0x81}}, 0x48) 05:11:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900f2023fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:19 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000440)={0x31ad, 0x28, [0xfffffffffffffff9, 0x83f9, 0x7fffffff, 0x20, 0x81, 0x0, 0x14000000000, 0x4, 0x219d, 0x100000000000000]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfe3, 0x410040) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a45321, &(0x7f0000000380)={{0x75, 0x9}, 'port0\x00', 0x10, 0x100000, 0xa488f63, 0x80, 0x8, 0xcdb4, 0x3f, 0x0, 0x5, 0x80000000}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r1, 0x40000400202, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1261.752362] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1261.768381] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1261.780624] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000033fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xa000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:19 executing program 5: socket$tipc(0x1e, 0x5, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:19 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='em0vmnet0]:-\x00') r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) clock_adjtime(0x4, &(0x7f0000000140)={0x7f, 0xffffffff, 0x7, 0x4, 0x6, 0x9, 0x7f, 0x100, 0xffffffff, 0x6e6ec8a7, 0x1, 0x4, 0x3f, 0x10000, 0x8000, 0x190594c, 0x4, 0x5, 0x7fff, 0x75, 0x32, 0x7, 0x7fff, 0x100000001, 0x3, 0x6}) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x3ed) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0xfffffffffffffff1) pread64(r0, &(0x7f0000000540)=""/253, 0xfd, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r2 = geteuid() r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfffffffffffffffd, 0x8140) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x61, @remote, 0x7}}, 0x5}, &(0x7f0000000240)=0xff1b) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x9}}}, &(0x7f0000000300)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={r4, 0x9, 0x30}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={r5, 0x8, 0x1000, 0x0, 0x1, 0x44c2}, 0x14) setuid(r2) [ 1262.245642] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1262.253981] ucma_write: process 10327 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 1262.271046] net_ratelimit: 20 callbacks suppressed [ 1262.271054] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.281130] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.286263] protocol 88fb is buggy, dev hsr_slave_0 05:11:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000053fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1262.291390] protocol 88fb is buggy, dev hsr_slave_1 05:11:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xc000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1262.351067] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.351168] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.356196] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.361242] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.366296] protocol 88fb is buggy, dev hsr_slave_0 [ 1262.376279] protocol 88fb is buggy, dev hsr_slave_1 [ 1262.564602] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:20 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000140)={{0xd0ad, 0x4, 0x7, 0x4, 0x100, 0x2}, 0x6, 0x2, 0x5}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) close(r1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x5}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x6}}, 0x18) r2 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)="d358a8eab1b3cf99e1a29fea394721a5a475396b5649a4198074e2a7f18e1c92c4ce7df059e77ce4adae95c2dc1909058c7b81598005f3a6e68d39beb8cf3b27f6eb862164b1222c9233fdc0aa26a4a06a3409d86bd03be959c5f83c81b0ed4e756a6cd2a970e1494d78d7d253c5772e06219e7fdbc5f95846723440534fb58d2f05ece2a2e73028a2d5fcba8ecb913647558becd99b09ba40f257339c923276882d", 0xa2, 0xfffffffffffffffe) socket$l2tp(0x18, 0x1, 0x1) keyctl$setperm(0x5, r2, 0x3) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000200)={0x1, 0x4, 0xcd, 0x200000000000, 0x8001, 0x8}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:20 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x4, 0x18840) recvfrom$rxrpc(r4, &(0x7f0000000500)=""/71, 0x47, 0x10040, &(0x7f0000000580)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @empty, 0xfa}}, 0x24) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000200)={0x0, r5}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000380)="5040b36c29ccd372fbe2287fb27d441bc11a2d989da101a8227f83c408a7a54df164affc8b3bc1409c874e4d755f2a53d2a3486c14b50cb2eed78cda8c3a30762ed8b1fda2e3cc7798d1c830ea5371153013cde686ba60e40a814b1d19cf60685b267ff7289b82f14a860afc490dab6b76b32f7abf2e86b4f7ca073a7290b3e29c6811a81260159737a2fd99f7dc18ddd7de5c3a2da9ccb26976233fecb5bc9fa01748a46c49463908b14c6d4d7b5eae9920dae678da58b4e257ab7b7a6af29fd1475193c71663b877721d4592cfac936e836bf031875dbc401f2a7c33e9c32eb543d410d0737a9330e4939cbe5d213399581df2281648ae1a1c173adb3bf4fe") syz_open_dev$swradio(&(0x7f0000000700)='/dev/swradio#\x00', 0x0, 0x2) 05:11:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xe000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000063fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:20 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x103, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x87, @local, 0x1}, {0xa, 0x4e23, 0xfffffffffffffffc, @ipv4={[], [], @broadcast}, 0x4}, r1, 0x800}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff, 0x5}, &(0x7f0000000200)=0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) [ 1262.758666] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:20 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1000, 0x101001) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000400)={0x20002012}) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000003c0)=0x7fff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000500)={0x10, 0x30, 0xfa00, {&(0x7f0000000440), 0x0, {0xa, 0x4e24, 0x100000001, @empty, 0x6}, r3}}, 0x38) [ 1262.891197] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:20 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x81, 0x101002) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x4}, &(0x7f0000000200)=0x8) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) 05:11:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000073fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:20 executing program 2: r0 = msgget$private(0x0, 0x80) msgsnd(r0, &(0x7f0000000200)={0x3, "a8fef544a39c5bc5fc702d2dea5576bb026a4eff28e37176bf902fda01fd20d37a8e45b8ad124f11cb1a7226dfddc08d1d212aac5edbfcffed38056927b0e6ba81118e674f1da21506"}, 0x4d, 0x800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000001380)={0x2, 0x100, 0x2}) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)) r5 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r5, &(0x7f00000014c0)='\x953\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0086418, &(0x7f0000000300)={0x7, 0x5, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffe1}) 05:11:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x10000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1263.173658] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:21 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x2000000008000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) r3 = socket$packet(0x11, 0x80000001, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:21 executing program 5: socket$tipc(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x400, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x400004, 0x80000000000010) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000340)=0x1) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000380)=""/244, 0xa5543089, 0x0, 0x0) r3 = gettid() socket(0x1f, 0x7, 0xff) sendto$packet(r1, &(0x7f0000000480)="269469b6521553032fdbee154392eb769b625cdee7a5e80eb266a465cbebeda64acfa8b722f00af0d9ea648938f239ba8486da6146a045913d8aa798", 0x3c, 0x8001, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f00000004c0)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)="7d6fba8772b862fc085a36d6f4734966088438060ffaaf83188e92ebe3014434a4c0902e5e547c95966e26dd2e19c714a53015672746ad6736238bf135450fb0d2456567e7f972bcd538ce27185ae4dae9a064503ac236b9a3168b80edef8ce7b7b0a5555b4e33c860913a63a37babb1c1c226b9a9ce3125b45cff90c2989a18e6281ec01147fe0f7d9832c8b51574f3ba435867aa2d8e44887e0fdf36313e3c24577aa21eec6083922522db63e98196a25febbad9e008", 0xb7}, {&(0x7f0000000600)="67aae7937b588609c6495c48d01596a327d48fe057c5137135ab056d37a19057122323084a4de792a0b74b1a9f1c3b4e92215e7f34405ffd196651eb076d66ea96bf3c4778b438c1a86137e2b66adf932c52ab35287fb8781ce055e79b17a722647087b54c0774dcbe30b2edb9e4a30f4380b7447a3a29ba51e24d400535133ff4e0f5a03b874a9816f9b9f2ed3ab25987c420a1a6669bf94fc1a3640aa45729", 0xa0}, {&(0x7f00000006c0)="746520064443e84c8e60051d084496fa1a59dae7322d5d6ade3c8f8e27271c89ba86e4e9110b9488b3ca2807d9dfdb294f2bf3c89071771b8578ca945e7784fc4490c6dcacce817e89ea2cf5b0b71c14726d74778813f78e95b92aa792102614f665b1edaf754a6893a4343797a6bf25d5fd708d84ed580597b699d4e5c50c63effedcc05ae8c9e12d048c9b27df284547f2c68c96b27b65770a207cb5b0ac306318cfef3b934eed9d84fa0c05f84418e6b91d31b274c1fa25f7f10cc899efc051a6d257621917f9870b7b588efdaf45c0c67339e1da4bfa0114e32d7813ac5d5a31cdbc5901576345d4", 0xea}, {&(0x7f00000007c0)="b5f332dedb8e31d4fc110e1e8b7a4eb8dcd007d05823d65580c279056013fe8eff2f6a34db6ea43e4a53e2fc127894b0f327973e4efd9a77608bb2e773d2feb405563651ce2b14fe7832db351a004c92ca15213800fe392ef858708e414d02638690dee11f7a6640fd0944b5428e428131a50ca15a", 0x75}, {&(0x7f0000000200)="dd6f46c15e19bbe1f6b3a1c0a8277313691e1899b9589036276857c0", 0x1c}, {&(0x7f0000000840)="ac44ff9f04a6343107ad7b21d7e2b81f19c293f670718d0baa0716598384161e0738d168c6fa9d469e901395b2fabb2edaf56c2ef55ce99b74afdfd7943e4027f8fcd109cb3a8e94349c28cf1817ba438c0e1f8531299cd26ab220b7900ead06da982566991e4f32c09a712b919b90cad6bf53436bb23a9e2735f13aaa92134fda3634f3c5896b0d7b0b88052f4f119cf236d6a9151d083562", 0x99}, {&(0x7f0000000900)="b73b4f4b636efd409be0b588d831aa6c117877b8ec59adccb81c8712f394faf672d818c42af83124c870cd5ad357ebb7c79f9bf889ef9bbc7a3299773d5a7004440125beaa284a98a4ba609687172bbf657b4157527a484d8251ec41e3fe7f6d28a492387fa8f1d2e3c2c031701250b783b4b7750a23608417ce3b92a98caabfb29ebe65ee9b401ce09c673dc2c71c89c7f8fc9e31ffc76722f1a13056c5a40afb64e76aa4255dffd22993814134d5b4d505ccc415500268c0640f735a400018cef4d8142c56f04c89bec4c4b293f768a9569b43b856fe9d71b99a04e26ccbd544618acc5e", 0xe5}], 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="d000000006010000b20000009b3159ebb69533a76acbdaac01a673b50a2f5eb591769733124447ab2b753025af68ff547f0e2e9b848e049dde35d1b944bdf2a06cadfdc8e6c6d8d1000aedc13c0650b042be86374b69a11d8e3127766d027dcfff8fc5a4e0b3a66309fd0b46aa1d4f118aafaf6a0d6216b8b7de2c30c1554fa0473935d13b54b990b1b18327ece30e53fc863389b782eee56d6294efc665d19e18396b8bdf2c05fe63f8dff55f6fdfe86f67d3bee3ec1e187ca14588c6bd16c96fcbc8ed7bedc074"], 0xd0}, 0x4000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x24000004) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x20000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000a3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:21 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) [ 1263.713719] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000c3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 05:11:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x40000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:21 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x1, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000e3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000400)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000140)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x800}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000005c0)={r3, 0x6}, &(0x7f0000000240)=0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x40000000}) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x200}, 0x28, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x48000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:22 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_to_bridge\x00', {0x2, 0x4e24, @rand_addr=0x7fffffff}}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600ff7f07070000000000000002003e0008000000bb000000000000004000000000000000fd020000000000000700000000003800010004c173bdffff0500007001010000000000000100000028000000000000000008000000000000ab000000000000000300000000000000000000000000000048b45c14bb8b46c7b988d4a269f5fc63f131cf4698fb83a6624f027fc2eed830abdb0b963e67905397838a9883fe483825"], 0xa9) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000080)={0x800, 0x2, 0x1, 0x404}) 05:11:22 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) fcntl$setflags(r0, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000420005010000000000080000000000005a2ea99c699907554a873fa3cb56fe39fffee2b76a3389961576b8ec028d17dc5fa6a1432dfc24"], 0x14}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x240002, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000000c0)=0x10800a01c) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="a72760a52742341bc0e3851b021265abe44c496742354130a7a95418e489e2d64b97b93de1aae73dfb28537a77d5081f0f2260dc0ff8893eb08d04ebaf27", 0x3e, 0xfffffffffffffff8) keyctl$read(0xb, r3, &(0x7f0000000400)=""/56, 0x38) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000f3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1264.651838] __nla_parse: 7 callbacks suppressed [ 1264.651849] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x60000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40000, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x20000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) 05:11:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900db1d3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1264.830476] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:22 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000180)={@empty, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={@local, @loopback, @mcast1, 0x800, 0x5, 0x7, 0x400, 0x9, 0x140, r2}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x141040, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x70, 0xfa4, 0x4, 0x200, 0xffdf, 0x0, 0x0, 0x0, 0x1, 0xe800000000000000, 0x8, 0x1, 0x10001, 0x0, 0x1, 0x4000000000, 0x9, 0x30, 0xff, 0x5, 0x20c, 0x1, 0x8, 0x3, 0x4, 0x3, 0x4, 0x73fc82e7, 0xce77, 0xffffffffe4183b60, 0x2, 0x6, 0xffffffff, 0x5, 0x5, 0x45b3, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x47f7}, 0x2, 0x40, 0x7, 0x6, 0x8, 0x3, 0x7}, r4, 0x2, r3, 0x2) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x2) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)={0x0, r3}) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x65580000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000203fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:22 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r0, 0x0, 0x1, 0x4}}, 0x20) r1 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xfff, 0x30082) connect$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x3, @local}}, 0x1e) [ 1265.010832] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:23 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200)=0x8, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x10000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/208) 05:11:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900003f3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x68000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:23 executing program 5: socket$tipc(0x1e, 0x7, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1424000000000000000000000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0xfffffffffffffe15, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x1ea) 05:11:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000403fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1265.666971] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1265.829807] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1265.841554] validate_nla: 7 callbacks suppressed [ 1265.841564] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:23 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2ea, 0x90102) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000440)=0x2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be459db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20200, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x8) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1f, 0xa, 0x14, "51316563b12291696208dff3f35c0bba473516322d7ac5f0fe458f231d9bef975fca2e78182d68ce3275c89ca1949726b1a3f691920a4251499d666415a5184f", "0f857d514d51729f7867cf0ace6fd798ee15c25cb6b81e7e68ad060424ccaa02894c06c9fe428b7c7835d5be0c8d633152e87244bc56f5df28996cb3aba14127", "5d5cc2aae081d991018953fc62c37e6aa55a5d3880860b885aaf537648ca6edf", [0x9ac1, 0xffffffff]}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c020000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000483fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) [ 1265.981661] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1266.015197] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:24 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x9, 0x40000) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$TIOCEXCL(r1, 0x540c) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000100)={0x5, 0x81, [{0x2, 0x0, 0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x81}, {0x0, 0x0, 0x2}, {0x400}]}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) 05:11:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x74000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xfffffffffffffff9, 0xf479, 0x5, 0x1, 0x7fffffff}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0xff}, 0xc) r4 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0xff, 0x1) clock_gettime(0x0, &(0x7f0000003040)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000002fc0)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/249, 0xf9}, {&(0x7f0000000640)=""/42, 0x2a}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f00000007c0)=""/43, 0x2b}], 0x6}, 0x5}, {{&(0x7f0000000840)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000008c0)=""/65, 0x41}, {&(0x7f0000000940)=""/32, 0x20}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/5, 0x5}, {&(0x7f00000019c0)=""/203, 0xcb}, {&(0x7f0000001ac0)=""/239, 0xef}], 0x6, &(0x7f0000001c00)=""/169, 0xa9}, 0xfffffffffffffff9}, {{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/101, 0x65}], 0x1, &(0x7f0000001e00)=""/169, 0xa9}}, {{&(0x7f0000001ec0)=@tipc=@id, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001f40)=""/13, 0xd}], 0x1, &(0x7f0000001fc0)=""/4096, 0x1000}, 0xfbc7}], 0x4, 0x1, &(0x7f0000003080)={r5, r6+30000000}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000030c0)='/dev/sequencer2\x00', 0x8a000, 0x0) bind$xdp(r4, &(0x7f0000003100)={0x2c, 0x2, r7, 0x3f, r8}, 0x10) 05:11:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900004c3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:24 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xd) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1266.601717] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x129, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x20, 0x0, [0x1, 0xca0, 0xfffffffffffffff7, 0x9, 0xffffffffffffffc0, 0xfffffffffffffc00, 0x1000, 0x10000, 0xfff, 0x1, 0x9c42, 0x10000, 0x100, 0x7fff, 0x1, 0x9]}], r1}}, 0x20) [ 1266.646026] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190065583fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1266.826858] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1266.849229] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:24 executing program 4: socket$tipc(0x1e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='hwsim0\x00', 0x10) inotify_init() recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/147, 0x93}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:24 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x410000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x347, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13d}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000603fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1267.002062] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:24 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffffffffffd}, 0x3) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0xfffffd5d) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x81000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4008641a, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[0x6, 0x10001, 0x7a0c, 0x0, 0x79, 0xffffffff]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff4e, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffff04) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x13, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:24 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190058653fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:24 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2e750a3a645d3a0100000020c33ea93c9d5388537cbe2e1e633467f4ad33f43ba1ffd19016af05349b50ddfc4fbff5b01c2953c4cab678b2e3c3d50d0828ec8105c7cb59b110831a92383f8b0b3058606ca6e89f790e5675427bb750fb6c0c3b9cdc0dc3f409a635a29102dc48e7ccb81c63bc665f659eb121bab23ef6c716825287aadcedf35aced385"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x400, @dev={0xfe, 0x80, [], 0x1d}, 0x8000}}, 0x8, 0xffff, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1267.577713] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1267.591367] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000683fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x20001, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x448000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000200)=0x1) write$FUSE_WRITE(r1, &(0x7f0000001380)={0x18, 0xfffffffffffffffe, 0x7, {0x7}}, 0x18) fsetxattr$security_smack_transmute(r3, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000300)='TRUE', 0x4, 0x2) mq_notify(r3, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={&(0x7f0000000100)="08cc59bfd8baa938cc95479c567c72cce504a46138a20af68ac9e7b61852c887be8da7570d0a20337cdaab71ff0e653a3c9180c9b60923693201246847805be723e230fa063371d28354abd5e55901a7b6aef678d390d8e939eadcfa800e2705fe2f72e4b8084847df716788b4aff7800e689ed51337e70b9d4f", &(0x7f0000000380)="be7e2daaba6186dd36067e09ac515fc5a273d9e86b99c6ba35e8bae05b71be42e1b0368e923933925d0fa4fda57ac91214779073f5ac101dfb3b7bc132e0e0ed6be3f6f2184af147f688eaa5a6d56cb71ad6cfef3d11d2295a9c000857eb509b2368ea5e377abbf9e7d960b0de605fe73bab37128a868466581ee31f2b04bf5d581ee9312f29d5b0bca5b8b154ae2f5a779d58c860d88735c3a74ebbcb76dac42c0232239f151d88b9d96b4f5a32b2aee042004729a3713638a59d4ce5f1630e5951db71093ac69dcbf736d705189009367c4ef45bbc9b53b35edd5ee9a8a1368238e1e25271d000482877bd8af56c53fd783b1ad9da4204f48968052281b87b7f333c0795a3b8167f9584efd15778730d3a54981aa8b2e282e459d2c5c6b2476b2d43907be3d47a279aa707e1aea218a7d783939b352639cb52604fa942cb858c547d62b89af493efa0e274030a115365de4b0ebacda50b60bfc4be5bf3b1e7cc2b5554ac23490a3f2da557fc19c9b08d043bc4816e0947b52265687c530707bbebe198b70c725c8d382fd9a2b3b215fa5acbaaede96143cbad12ffd1e25effe38b7ad2627656d98eca544a1f8768782a61e989937c16f9de52ee86ed2f88035a7d0e73680e0ea000fbf07db771a8fed1a7a0aada4a572afca846e64d21507510b1851b4d1b9456fdeb2b72a586ff1ea84e1de587b3a9720a3eb340a5410ebf1b8536c8c231e84c24270543b19381c6e1b96fcd885e5ac23ae8c785133a9ef9cff45e36c814aee5545468ad7e9aac0b4812e3f187f3b7655210d391e4dc2eb140add6b20580ee2e821332d1b632f67b7c0d62e6018dae2b7bfb3e31d28155d0d19389066f41abdc11dec97110bbb9545ba614c0ee73de7ef2f90d01c9bb5baa61c493cdfeb50167575a1f0be345651b7e4b5ed644c82a6d9809f961ba83a01df8f04de3f5df3057cbb552b8d53d9978d5b27ab7e435a0b0768fd2ab366f238ce115bf21034f75fdd23f03cde74d16c4af918f99f9ed7466bee41b1b8177cf011dbad8cfd3b0fb14cfb45a9a957d7cc712687ae5f3d55058fd4ba7f6e8804a2b21db72bdfba53c634c758e0d7257efee011ccd606c346720f1c274eb3515a1db17bc2a79074efc25b970c0cc9ea443d5761ee8b9f36468614431b2515620d12e432af5366357f3ff8ecacd5d87512f2c297cc8b08c4884e2b8ea1855536eae75aeb914f889b9a42dc1ffeb10894bf4620b262ba3af22232dc06ab18e38c20224829e368fa3c3ed05189901efaf6bd40382e4572e0224eecdbab7a9c84daecaf26ffcae1771395b190e7b7efd6ccbd606fc44ff07b19aea90179074adac862566a42a0726db2d3fe0de1be6cfc4ff20b1901cd9418f0d972b1f38a77f21ee55d1b0902a47a56b4a029eedbdbece338cc95be865c6b934f3c6c1e2b42b7cf37c5f538c3adc5c4aafdf225295c67e51f8758d0a650639119e1bb53afc7b3dfb5b496b108f356e7ad4681ce13f2b5cde137382b86705c35e78f8cd00570deeee195486fb3936d487ba654d70a358d8563e7a7d61107ce90ccafd3d410b729f96104bb15f448ae17495a90abe2ecae9d5358f2f1e869c57e37bde168885ff4a2744c357695df4b75d08788129183029e4ce4b376590bd825a284015ec2be6cbdd1c15b058965daff05370e0ec8860fb432a4700d2e3afa41f65d6154dad507ec29ca899854b6e495c77fb6fe101846965db800cb8ebf59ab9ac32daec1caf8a20a9817524e9d8f69175ee853e438ac48709d41d0e676f0fcfd9e30c984f78416f5185baa8cc5aa5e98cbf7b139b8a69166c5212cd441e11fdfb256ef5fdcb36a1ddd98a4d2c6855af0e715ab808e3c853bf0adbfba98823e3e1934c38fdc1a22cdf302e5b873ab6be7348ad279aec8b6ab52cbc00e02d0b25e0b8b1f4668cd823825f55ef1f0b21266f1673cb4f7dca8e8412677ebfb1be4895866b7ea964df8bb04d4c5a978eeb5308354fd65523a38efcbae23f22505820bf4ca9347b6e50fb1312752c9bf315755ab60ae34ab337fa094591790823a533d30b5bf941dccfa9b9d80014cb6c69484d26d6005d369c7324a7cfc529fa916d893865207039466c895d1e43488fb887bec5cbdbdbcb1b5e242c66cc52ecfce55e2fa52e0791398f7979d1cb25d8a86be9e85e8a96bc4318754ec9b9b07df58f7aa44fefc147118e7d117c19f4204b50ddd94154c4c2cb56526ef6648ebb76ecda2eaa023729d21e25709b05434ff36de580800af6ccf42ff63b189321406fa984342a625317e007c908b8f6dc3d78ba04030a46bbe5ded0980f6abbf5581cc04224516f478c7925d7f022f6b42e2c93b0b268abaa0642f3fe3205b35f5aed634cd636a6e44311bde282b61b75f7d813860dbd4d8c53c58e75917485a985ffe07397f81555e9494845baa5d603e9983adddec98ac32ab10438e9f687b12250e42763af5bffa85de0377b102cb9e15899e50b617e50991e15b7c1c3ae01caeae1c7d4b1f7c2a6a93874d484fd2a02dd50563e1c2e8f02d563d6794cb47bcaf80d42ff350bdb147ee0c00fd31428fad96d8be98550742aacec0e8aca670f8ed9f883b7c55d044fe375d8c892df3c854debdb5f6dee8cfbb0dcf2427e0275531fcd50f118d082373b46b4b0e3e5eec72afb690047c6ecbc2e4d59dcd6fd14ee3a73e072f80812f187bbaa225c96244b072b329cdd595310df3930b2ebcc7fd7110d26fcea666c4c3222232c8d8dee151960acf9fed1936faec7e99e839749811cb8cc370123d9657647eecb809391cbac6ff7e76347932077ce5bad396587c2312ec1495d73efa3b5615285438e159c75591a763a047ea3365a9b19bb337c120117e68f3fdceda09431272ded5fa217404498d2b7fbaafaa1b27e054e8c21d035b05cb2385d0a5eac8e3cd68e1721e413453418ff93417788a38790d4fd0fb96763a5f10af58aba96364a2dcd12f7c81698bd4e93a1291fae07a13f95e5cc396bab1b808e757fc68a2a55c30ea4da1ebe08b5ae7cae8dc64fb1947e6a9462e457a4a0b8f0090dfd4aab5fd6f6cb1d603f174d21c7bdcbdd48da2aa086eb529a38e25adc9e1483252e04a9cbb82f1c7345f78da706e032617b295d3cc0afce5dbf9d95d75c51e8747778d0a2955fd4c13b21bbd67dbd09b8360f56588676ecad8cee944857abd30d464fbe7ea4ed93b455e1e02af407793196b4945739a3e90200c230501d1e48906018dd5134312b54258725a3dccc2fb22f0ac29bb397e5a1f7b4db90e70de5f442e76d23db5176ba0b138f263dfb88bb63e577335e3f3972c93aa9e373ff3b9e57bf1f98bc8dde67524c6e066f5b8fa8d04ef70ddccfdce1a9dd6d6e465547d25822dc263cbfe7a989c1ea37ae1d78542a61a4a177896fd32b0007eab957c30ca610c06892928e3c51e38d25096433b9ea5935293e0559f659c2cf137fcc0cae5320a2bd80c3709f861341c7ca2b103302204728ce2d823b4096e9a67788186da830da4121af77f859289edd9d480e16c1d154a69fa94d0f341b94b4df90af9173e031b3efaac2f4d9be8b71a2aabbb3467602aa4a23c5a5c27bdecb906154ab53b9e022e527b80263acbc2e21b08ef65749b760e97db2480df1be27c7b631a6f91dd6432f44629211ee9b3fd77b2d5cc29e94a6896313a8e8cd5cec992c9f3e1db56abbc173dcafcbe4b1e3e8f2a271f9f3d8dacc399fdf7f39dcaee25cfb24daf77be56c7ee61d2542af246af14fe985d6272ab25d8f1d5ae6742295b97b24e3663832b8996d82186018077eface4baf2ea09565a24bf59ff6d4981a941fcaf03486033b35ce6f8f161162b4a8ecbab6f45f37a34dfcdb4ba194d03d49f19b5d57e455cda94b4043f5456554054e671e3cae44d58394cf9df9e18ee6aa4659c220a74b71bc0a8d27823d5b71ab6ef86b9e81b89e4145fad6339a298625d0eab8f042bad967960a9c4f22e5abc3c2cfd5b1f6a1d1b38578a0f88418800a24066f27eb4cbfbd3fee69c8c83ce4d06e67b54f765cba1bf2ee80a537f2eaab8873ab811c38941d17688ac9f751f4125e35f2b20da35eaa76dc71fb34ce023082028ad6450d0cf88ec567a4dcb87a120e2b2e9d932f7c521fddd100d297314fe692d0f2fa037c29179a31e90cb11e1d75de095a999672f20b37bdc1438c07b999260acec75d23440a9e420dfd44f3aa3cef19e74163d21816774dfc8557b7fc7b44dc921a9cf68bf6869d35d943edb59e1bfd02f95cde3c7c77414be0febc1811f578dfa541d664bfe5b22a1febf31a6431b2f749e550cbb3644ff695bc277d59c1180d5c027b0ee1cb0e18fb65549759d20aff1811e85ba2d7a086f59a6ec3306b00aff2175049acdfa03ed521618e21e6d7c3ce8af60dcd730afd7ca8cc9461e248e70265077c0fcbac0c17d99ca65ecfeaad2b675c59c2d9e4689488b248beb2efd3d4f2cb17adda892d2a567f9127da4c42362e8bbf409bb726cba46facb9074904e1c273dfe431cc6c40aa135faca830659983668fd100678dd6a5debd5c929474155a0a4fa1d71b6ea52b7ea92b9219e3a99397c32389d71ebbe0a0efce17e795cdaee1b8353bb9fc21ef4907e5001a04bdcdfa86a9516c12586efc69da81813535b1f54cbe95d759535ff98b63c02319750be3225a5fdc87c33a7f12e4556539fa851a1f3b427a60594964143810b57845ff4f77ea2c6da2e838ae4533b72aef54e6ba349ce6cde5eb4a9fbd2b4fa7aef4c79be41849d882cdbbcca8e7e3077f0e4047019bf4f54759ee533b8ccd81ca9fa1a74c77e5ff47359efe6d9016c02d6804cef2645f29064d404b75189363e574a6a6508f4dd30d45aa60a4979601378ef6ebcaadaa647f62b074dd146f57bf619bdd65ce65d7035e2a559bd357294d9d2da07ef85bc95fdecab83cf24e44a1177405812b13d2503ca75c00acb5685ff0b58c25888b2eb4d736f3af1afdb47ac44a000196063c8c94533e2f9ab5f3140739f61221da3b78c4768c7147e3dc1bcba7a400847b571be65a1893b26e8fea76984fedc09c6cdacbb6e4bc02fe3da79dcd9d3196883fffb81145df5814a2d0153c8a46fd886246e6d5ee4d6130b9234b332237acdd32ade4a863b1b2a32f4defcb2c5bcacb74f86dc0d530d99ada51645f0cfa65eaea8b03816badfca5dbddcc1baf891885fdfaac893557409b15d93e516070c905e51fa1bc037ce0184355fdc5ef522f308ca82ea738818a6e5ad0c28404b83eb8a8e0272f44d6c05c565a256918ed317b71eedcfbd1b36bbe0555b4f9866258ddc35ee8911376eee2211993e28bb25bb540fca6bc3983daf8f79f8d7b74cdc03fb1fa5846e2acb76302963d3729e53263737c37a7b2ead8cb1a8c986dc9c8128967111ea233e804db57f276d6f745d89feafc4664044326cb51397e0d5b737798bb28ba6ca5b3d3e9930a567e85d26c508560ee01182be07318609e0fc233976a9abab5e33ec8cee365eed54080e1cc8437850dde34c672d5bda458d3ed86baa7523732ecd3ba863ed4d5d67f7e473cdf4b44d46895a4bdb21e20dc1b939ab58528e5335bcf680e6a8a6abff985fc5696ebd16941792fcc88c6381d99a9089b08b25964fb4f206491ed691009869fad34ff01cf7b6ad1a44126f6fbcdb590d230c2a68ddb6961ca2ceb6e5982eceac281e4119e34062b0a51c795bf39331a002ec286a70660d01adc3086957946227724bf13aacd24f61c0f2364321b9df74a0966d1a78d4385420118b8b938"}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000013c0)={0xf, @output={0x1000, 0x1, {0x401, 0x7f}, 0xf6b, 0x2}}) 05:11:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x88a8ffff, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1267.691417] ceph: device name is missing path (no : separator in .u [ 1267.691417] :d]:) 05:11:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900006c3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1267.755120] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0xffffffffffffffec) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1267.818378] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x9effffff, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1267.890802] ceph: device name is missing path (no : separator in .u [ 1267.890802] :d]:) [ 1268.035703] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:25 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x7, 0x3, 0xf, 0x1}, 0x10) close(r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000200)="a316e962bb94c6d34e92987e79a1dcc6708722b32d147f82f9b4d0986ce4f310ecc7a080d1a232d08cd33da1bf7713c166659b0124ff88d7f352e4c3e738ed5bec18045d9d841657d5e33e7ea8c4ae6c825acea416858526df3d8bd6e1888ee8f4b8ee216a03c9a7965ebe79a7a04817b00166355e03739871400e803b2d4f74f99b918533746df720c838df7aa279edbb7666631b0f6ee3601df2adb0b883c61bcacd9c3f71b291f6962b81c11805e95f8ece47a17c50909fe92ca3523b92d184ddf5048292c5c73eccd49456b81300469d0d2a05f5c91726eceb91c211055e8d721f3f6e9efa8aeaf716d7efa963aff54d8ab41a6e660d") socket$inet(0x2, 0x3, 0x29) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000743fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xb5150000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:25 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000000ec2600000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:25 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900007a3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1268.554942] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffff, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:26 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x0, 0x7}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40246608, &(0x7f0000000700)={0x401, 0x3e, 0x10000, 0x7, 0x7, 0xe6}) sendfile64(r2, r0, 0x0, 0x4) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/133, 0x85}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/223, 0xdf}], 0x7) write$P9_RLOCK(r2, &(0x7f0000000080)={0x8, 0x35, 0x1}, 0x8) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900f57f3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1268.741593] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x440042) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfeff0000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000813fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x191002, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x2, 0xfa00, @id_tos={&(0x7f0000000080), r1}}, 0x20) 05:11:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xff0f0000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1269.151123] net_ratelimit: 16 callbacks suppressed [ 1269.151131] protocol 88fb is buggy, dev hsr_slave_0 [ 1269.161307] protocol 88fb is buggy, dev hsr_slave_1 05:11:26 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xe) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000842000501000000080000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4b8040, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000000580)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000400)=""/249, 0xf9, 0x9, &(0x7f0000000500)={0x77359400}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$evdev(r1, &(0x7f00000003c0)=[{{0x0, 0x2710}, 0x3, 0x7, 0x200}, {{}, 0x5, 0x3a26, 0x400}, {{r2, r3/1000+10000}, 0x17, 0x40, 0xf6a3}, {{r4, r5/1000+30000}, 0x12, 0x7, 0x8}], 0x40) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019001ddb3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffa888, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) memfd_create(&(0x7f0000000140)='vboxnet1^mime_type\\{vboxnet0\x94\x00', 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x100) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x3, r3}) 05:11:27 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sync_file_range(r0, 0x4, 0xfff, 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:27 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffff000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000f03fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x84000, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 05:11:27 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000006c0)={0x7ad62adf6b952ebf, 0x100}) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0x0, 0xee01, 0xee00, 0x0]) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000540)=0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f0000000700)=0xc) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000600)={{0x7fffffff, r2, r4, r5, r6, 0x1, 0x5}, 0x0, 0x5, 0x3, 0x44, r7, r9, 0x7}) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff7f, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1269.742490] __nla_parse: 7 callbacks suppressed [ 1269.742500] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190002f23fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff9e, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1269.903214] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:27 executing program 5: socket$tipc(0x1e, 0x2, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x98000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)=""/159) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200482, 0x199) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x2) [ 1270.591035] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.596198] protocol 88fb is buggy, dev hsr_slave_1 [ 1270.601419] protocol 88fb is buggy, dev hsr_slave_0 [ 1270.606468] protocol 88fb is buggy, dev hsr_slave_1 05:11:28 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) fchmodat(r0, &(0x7f0000000100)='./file0\x00', 0x10) 05:11:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="29000000200019007ff53fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffffff0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x28200, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0x5, @rand_addr="9ff2d69c423549b5c2ae754d01b82c82", 0x8}, {0xa, 0x4e20, 0x0, @rand_addr="4e717e7431c40aa15ce7a6557890d391", 0x81}, 0x1, [0x26, 0x0, 0x5f79278e, 0x5, 0x0, 0x20, 0x7, 0x10000]}, 0x5c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:28 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000200), 0x4) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000400)={r4, 0x9f10}, 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:28 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x8442, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:28 executing program 2: r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x81, 0x40000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000200)={0x101, 0x0, 0x10000, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f0000000240)={r1, 0xff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r4, &(0x7f00000003c0)=""/244, 0xf4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000100)={0x40, 0x2, 'client0\x00', 0x2, "8be94c90e49cc5fc", "29eb44e2b32fa462626758f4bdc4684b2993b126ac94ba05f0c5f51f1288b16c", 0x80000001, 0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) [ 1270.703760] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000023fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) 05:11:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x40030000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1270.872116] validate_nla: 9 callbacks suppressed [ 1270.872126] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1270.885294] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000033fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1270.999725] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1271.040871] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1271.231113] protocol 88fb is buggy, dev hsr_slave_0 [ 1271.236235] protocol 88fb is buggy, dev hsr_slave_1 05:11:29 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_open_pts(r0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:29 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:29 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x18000, 0x6, 0x401, 0x1ff}) 05:11:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000043fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffffffffff, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:29 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x7530}, 0x8) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 1271.716513] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1271.735347] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x100000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000053fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:29 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)={0x0, @speck128, 0x0, "33d511c1f3291271"}) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={{0x77359400}, {0x0, 0x7530}}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x338, 0x3, 0x2}) [ 1271.916136] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x103000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1271.957262] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1272.101693] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:30 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0xe8, "5672ecedab7eb00f11a8bb191370c5e5f6ecd707e1ed3be5df249bd2f623128b4a0b99a9734166c36fb005560de27a8150334064c4ed5f0868928c091f143fe9e10cd1b029ecc628f0ba32d32f652b9b28924e61dd000797b3569f9f3ed35e6e55fa55413bd951f03730d6ae2c77decc8b0f2196085e6b1da2ab988a4ed8ada894253ddd0621d00d5b9e474be6bd4f2b0119b77b23761a8054b1733f9d52bad93b244dce8a32e19593590e4bd1691f77a72fee950efc6dc68c968897e7779cc11684b9db656a027038f0ffac129095db85a3fa911cdce22ab3dc92a1176e2ee73b056d96469a92fc"}, &(0x7f00000003c0)=0x10c) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x3, 0x0) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18100010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000063fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:30 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000501000000000000000000000080"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) ioperm(0xffffffffffffffff, 0x10001, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) 05:11:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x200000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:30 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x201) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000140)={0x7fffffff, 0x35323645, 0x401, 0x3, 0x3, @discrete={0x7, 0x4}}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0xa, 0x20, 0x3}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1272.675608] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1272.711678] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) rt_sigaction(0x1c, &(0x7f0000000180)={&(0x7f0000000080)="c4c1b05e6bb5c4e27d0e50000f0fbc5c070000001d670f7678e12e0b38c4e16d73df0064dbd20faeb352000000c4e106530500000100c4e34d40a85ab9000000", {0x4}, 0xc8000000, &(0x7f0000000100)="c4c17b129332233333f0814a560e000000f3abf081630b00000021c4c2c90117c4e18c584e40c4e1d455480036652e660febd8c4e179eb9e00000080c4e1d85fd3"}, &(0x7f0000000280)={&(0x7f00000001c0)="c4e1fc2fd5d9e0c4c25d93ac0300000100c4e1f95bb791000000c4e2692f35b6eb0000c4c17917ba00100000ff5cbd00c4e18dde4294c4e1d9eadbd9e1", {}, 0x0, &(0x7f0000000200)="660f3840fec4c1be10d8c4c27d18ae00000100d10b66260f0fa800000000bf2e65f76999c4e1235a04bda4840cd2c4c1757d29c4e115d93503000000c4c1d5ed13"}, 0x8, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0xfffffffffffffd7e, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x21e) 05:11:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000073fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x300000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:30 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f0000000380)=""/214, 0xd6}], 0x2, 0x0, 0x13d}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000b00000501000000000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x400000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1272.876973] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1272.897395] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000000), &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x0, 0x0, [0x3, 0x80000001, 0x8, 0x0, 0x5, 0x7, 0xfffffffffffffc00, 0xacc, 0x40, 0x2, 0x6, 0x8001, 0x0, 0x3, 0x1ff, 0x3]}, {0x1, 0x0, [0x5, 0x5, 0x0, 0x7, 0x4, 0x1, 0x4, 0x100000000, 0x8, 0x8, 0x5, 0x4, 0x100, 0xdb4, 0x10001, 0x7]}, {0x1, 0x0, [0x4, 0x1, 0x8, 0x0, 0x4c68, 0x93, 0xfffffffffffffffa, 0x401, 0x7, 0x9, 0xffffffffffffffe0, 0x9, 0x900, 0x9, 0x4, 0x3ff]}, {0x15, 0x0, [0x5, 0x20, 0xffff, 0x0, 0x80000000, 0x2, 0x9, 0x8000, 0x0, 0x1, 0x7, 0x7, 0x1, 0x3, 0x8000000, 0x3]}, {0xc, 0x0, [0x0, 0x6, 0x8, 0x80000000, 0x659, 0x6, 0x5, 0x8, 0x2, 0x0, 0x9, 0x5, 0x5, 0x20, 0x3ff, 0x9]}], r1, 0x1, 0x1, 0x168}}, 0x20) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000140)={0xfffffffffffffffb, 0x7, 0x100000001, 0x2}) [ 1273.033730] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1273.063721] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1273.321146] protocol 88fb is buggy, dev hsr_slave_0 [ 1273.326287] protocol 88fb is buggy, dev hsr_slave_1 05:11:31 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) write$capi20(r2, &(0x7f0000000080)={0x10, 0x1, 0x84, 0x0, 0x7fffffff, 0x6}, 0x10) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000100)=0x1) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000083fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x2000800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x200086}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0x1}, {0x200004000080}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/73, 0x1c}], 0x97) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000380)={0x1, 0x100000000, 0x5, 'queue0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x500000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:31 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="a52499a9684468c2e9abbd93f662af3a61ad0448df76285b2a242da89692bfc3c0a832b0f2c43210") ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1273.712759] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1273.728903] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000a3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:31 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfff, 0x8000) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) 05:11:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x600000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:31 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0x2c}], 0x2, 0x0, 0xfffffe00}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x9}, 0x28, 0x2) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000300)) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000140)={0x2, 0x2}) ioprio_set$pid(0x1, r2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f00000001c0)={0xbe71, 0x0, 0x5, 'queue1\x00', 0xdf}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000380)={0x8, 0x103, 0x4, {0x43a, 0x5, 0x42a2, 0xfffffffffffffffc}}) 05:11:31 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff80, 0x8}, 0xc) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000240)=0x1) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0xfeb2, &(0x7f00000000c0)=0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x1ff, 0x60000000000}, {0xfffffffffffffffe, 0x5}, 0x800, 0x1, 0x8001}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 05:11:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x700000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000c3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000e3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x800000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:31 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8002, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x10f004, 0x8000}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x278, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x112, 0x200000}}, 0x20) fcntl$getflags(r1, 0xb) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) 05:11:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000f3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xa00000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:32 executing program 4: r0 = socket$tipc(0x1e, 0x400000, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f0000000080)=@alg, 0x61581019c0de81dc, &(0x7f0000000100), 0x20000000000000ca, &(0x7f0000000180)=""/218, 0xc4}, 0xfffffffffffffffc}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0xe, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000004200050100460600ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8ee81e0dc23233973bbf5eef03b120516373bedb5a208261f638cfb884b47d93ec9585b2b8d0f62c08e027736fb389bf7c563a137289f2caae29a81d08882a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x204000, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x1, 0xfcd6, 0x1, 0xc}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) [ 1274.761047] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.766197] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.771384] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.776497] protocol 88fb is buggy, dev hsr_slave_1 05:11:32 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1422f1ff4100000000000000000000004df8dae1"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000300)={0x8, {0x9, 0x3, 0x2, 0x7ff}}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f00000001c0)=0x10000000000000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20001, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00fb50020130295287aba84ddfd0bef1a69d7a4d046386be936aeebea98dcc3a9fc97c2cd773a81bc9243450eea61002c80ed66f67e3bc32d952bd287ce2cc315a14dbb2fc233d7631695a2bc4f008ba1c4e32eb26aed19c92f977e573b287e9e7c5c473dca608d37516d1de12a6e344d5c185344105cdadcddecc8f136585effd5ee6ec6c6d42e515dcb78702b017439fc5a9056b857f6560a2c1ebdafb3b09882a6122a9e4b5933e439a93e6a03d7792da1799cfb5514670fd8b05649e6933424c89de0f79919d39d316578d0e75f65e261badb07fa840c7806fb84e32a0183946902f"], 0x50, 0x2) getsockname$tipc(r3, &(0x7f0000000200)=@id, &(0x7f0000000240)=0x10) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc044565d, &(0x7f0000000100)={0x6, 0xf, 0x4, 0x10, {r4, r5/1000+30000}, {0x4, 0x9, 0x5, 0x80000000, 0x9, 0xbfa, "d96a45aa"}, 0x9, 0x7, @offset=0x400, 0x4}) [ 1274.831063] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.836190] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.841010] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.841451] protocol 88fb is buggy, dev hsr_slave_0 [ 1274.846318] protocol 88fb is buggy, dev hsr_slave_1 [ 1274.851343] protocol 88fb is buggy, dev hsr_slave_1 05:11:32 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xc00000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000103fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x208100, 0x0) bind$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb8724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032fcc145f39a976b910722194cedad42fd2481ffaad1b55e2ac115095a45c3d4dad34d096a8226c715acb328ef57b013b2149986bce3c2990271372126ae4493bcd64249c071a362bc"], 0x1}}, 0x0) close(0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000140)={0x2, @pix_mp={0x5b, 0x318, 0x0, 0x7, 0x9, [{0x4, 0xffffffffffffffe0}, {0x3f, 0xfffffffffffffffc}, {0x40, 0x1}, {0x80000000, 0x8}, {0xe3e, 0x5}, {0x6, 0xfffffffffffffff8}, {0x1, 0x4}, {0x1, 0x3f75}], 0xffff, 0xfffffffff4731485, 0x4, 0x0, 0x5}}) 05:11:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x81, 0x8001, "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", 0x86, 0x3ff, 0xc68, 0x6, 0x7ed, 0x7a9, 0x45c}, r1}}, 0x120) 05:11:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xe00000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1274.982840] __nla_parse: 4 callbacks suppressed [ 1274.982850] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000483fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x40}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) 05:11:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf00000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:32 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0xffffffffffffffff, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000080)='./file0\x00', 0x81) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x1c00000, 0x6, 0x9000}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1275.200021] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:33 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8001, 0x10200) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1f, @empty, 0x7ff}}, 0x0, 0xffffffffffff1c7f, 0x0, "4cbf31d9c072a1c6c9c11bade65de711f7cd3c73ffe0b2fcf6a30cc2df9c670635b72df1f658f087492616cf3330bd9c083446b05454699df5c392bfc4c09380b8f348a4c8ab77bf88b15555edfa1c5c"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) ppoll(&(0x7f0000000000)=[{r0, 0x42a0}, {r0, 0x10}, {r0, 0x2000}, {r0, 0x1}], 0x4, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3}, 0x8) 05:11:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900004c3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1000000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:33 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400b8b442000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be1646c452d03b4874197032"], 0x1}}, 0x0) close(0xffffffffffffffff) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0xea1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x2000000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1275.855260] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20) getegid() 05:11:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000603fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4000000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1275.974858] validate_nla: 9 callbacks suppressed [ 1275.974867] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:33 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="145fc5bea9029349946f048348dcb4a87f1c4d871fb11a3e9959790d8567c3862babf8b7997ab9e53af4a90fccd93390e155ea97451184cebdc8d20a4e8f1d42f05f8c62b8c5f6773d50191f1ee7fe93ed172005d0cc87b5597dd7abde1a9d60f64ec2e971bc2f8e985288a4fed28fcd470e1c5430c0013e4d2ce4149d45bd3d39ed117547dd0bd31a80f884177faaae"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x2000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x28, &(0x7f0000000180)}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) rt_sigreturn() write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) r3 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x8, 0x607c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000680)={r5, @in6={{0xa, 0x4e22, 0x1, @rand_addr="7f84a74e1363619b2ee955ca20aafca0", 0x2}}}, 0x84) mq_notify(r3, &(0x7f0000000140)={0x0, 0x2e, 0x4, @tid=r4}) r6 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000380)={{0xa, 0x7, 0x7fffffff, 0x5, 'syz1\x00', 0x7f}, 0x0, [0x0, 0x0, 0x6, 0xb3, 0x8, 0x9, 0x2, 0x1000, 0x7fffffff, 0xffffffff, 0xa, 0x6, 0x4, 0x51f6e432, 0x5, 0x7, 0x800, 0x8, 0x0, 0x0, 0xc9b6, 0x5, 0x626, 0x5, 0x9, 0x4, 0x80000000, 0x7f, 0x20, 0xbfc0, 0x9d5, 0x1, 0x165, 0x3de, 0x0, 0x8000, 0x224bf6b2, 0x2, 0x1, 0x2, 0x6, 0x8, 0x1ff, 0x40, 0x8, 0x5, 0xffffffffffffffb9, 0x3, 0x7, 0x6, 0x100, 0x7fffffff, 0x8, 0x3, 0x4, 0x80000001, 0x0, 0x2, 0x3d3, 0x5, 0x6, 0xcc, 0x6, 0xffffffff, 0x4c, 0x2, 0x5707, 0x1ff, 0x1, 0x100, 0x80000000, 0x5, 0x5, 0x70f, 0x1, 0x5d, 0x401, 0x401, 0xffffffff80000001, 0x6, 0x6, 0x3f, 0x8, 0x7, 0x8, 0x400, 0x1000, 0x6, 0xfffffffffffffff7, 0x6, 0x535, 0xdf, 0x101, 0x982, 0x9, 0xfff, 0x100, 0x7, 0xffffffff, 0xfff, 0x6, 0x4, 0x800, 0x401, 0x5, 0x4, 0x3fc, 0x4, 0x100000001, 0x9, 0x80, 0xfff, 0xdf67, 0x4, 0x0, 0x1807, 0x100000000, 0x5, 0x7, 0x1, 0x1, 0x41b, 0x6, 0x5, 0x5, 0x7, 0x3, 0x44fc], {0x0, 0x989680}}) kcmp(r4, r4, 0x2, r3, r0) [ 1276.081843] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:33 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xd7, "425aa6386f699ce783ba4175b8e4f2b374904168e6c3a71ba721dfb1fc48d0f37bf22c79235aecb8bfe7812eeb59296a104f6084005df7984cc39cf8e6eae6e5bb2aad9ff95461e4a620c773d38638f6e6e0dbb54823d4b080ab9530d10cd65a51d8b5183499a1e7d2d2b1cd2b3462a332c6a78b1a9701c6b8ae6192289a8a28e2a1667b31ecdfd5fedda81d824a435af04904c9d43c542c8bb395fa69db13c225e12e27d05ba24ff796e5ea59a1307caa50bcf55138ee83f4b03e803ee7b133538ed32bc5d4f97ad74705ebed2c306fe5ff3b2d6c6ae6"}, &(0x7f0000000240)=0xdf) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0xfb, 0x6, 0x6, 0xe0000000000, 0x41}, 0x98) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x13a) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0x3, 0xfffffffffffffffd}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1276.131936] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000683fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4800000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:33 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfff, @mcast1, 0x10000}, {0xa, 0x4e20, 0x400, @local, 0x201}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0xfffffcd6) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r3, 0x0, 0x1, 0x4}}, 0x20) 05:11:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c00000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1276.301695] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1276.325166] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1276.413175] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:34 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2200, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x9) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900006c3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:34 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0xffffffffffffff2f, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1}}, 0x20) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x20080) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in6}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 05:11:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6000000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6558000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1276.853503] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1276.886823] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1276.949937] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1276.971270] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:34 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:34 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendto$inet6(r0, &(0x7f0000000300)="020400000300600000000000fff5", 0xe, 0x0, 0x0, 0x0) 05:11:34 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) socket$inet(0x2, 0xe, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x82000, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @empty}, 0x216, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)='ipddp0\x00', 0xa2da, 0x7, 0x6}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000743fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6800000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c00000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1277.210486] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1277.236252] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:34 executing program 2: [ 1277.368825] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:35 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65c909e967195b74f26aeb9f58a33722eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25078a4b636b1493b060159165e8d01923a163ffc7032"], 0x1}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) r2 = msgget(0x0, 0x200) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000440)=""/201) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000080)=""/76, &(0x7f0000000140)=0x4c) 05:11:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900007a3fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:35 executing program 5: rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x13}) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="148eb9a5113a5bdca02297860000306133cc1de8170400c173c5495331352353a074b7e41ee96eec87d961086ee451cb5b21772d03c2f6dc21e47192bc586908fa"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000000a400, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) 05:11:35 executing program 2: 05:11:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c02000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:35 executing program 2: [ 1277.797426] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1277.864323] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7400000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:35 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x10000}}, 0x3, 0x80}, &(0x7f0000000080)=0x88) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) 05:11:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000060ffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:35 executing program 2: 05:11:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a00000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8100000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1278.165759] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:36 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000004c0)=0x7fff, 0x4) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='efivarfs\x00', 0x1027001, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00') write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000440)={0x2b, 0x4, 0x0, {0x0, 0x81, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r3) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x600002, 0x0) 05:11:36 executing program 2: 05:11:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="2900000020001900000060ffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x88a8ffff00000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:36 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001180)={@rand_addr, @local, 0x0}, &(0x7f00000011c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000001300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000025c0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000002600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002640)=0x14, 0x800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000026c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002940)={0x0}, &(0x7f0000002980)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002ac0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000002bc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000002c00)={@loopback, 0x0}, &(0x7f0000002c40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002c80)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000002e00)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000005e80)={0x11, 0x0, 0x0}, &(0x7f0000005ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000005f00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000005fc0)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000060c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@broadcast}}, &(0x7f00000061c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000006200)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000006240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006280)=0x14) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000006300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24152762ad9dfefb}, 0xc, &(0x7f00000062c0)={&(0x7f0000007380)={0x588, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x4}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x81, 0x2, 0x8001, 0x55}, {0x4, 0x2, 0x2, 0x2}, {0x0, 0x8000, 0x8000, 0xaa7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x170, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x21c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x1, 0x8}, {0x1f, 0x7, 0x5, 0x8}, {0x10000, 0x10000, 0x3, 0x774ea67b}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7d6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r23 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x20302) setsockopt$inet6_MCAST_LEAVE_GROUP(r23, 0x29, 0x2d, &(0x7f0000000380)={0x2, {{0xa, 0x4e24, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6388394e}}}, 0x84) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:36 executing program 2: [ 1278.806423] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x9effffff00000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:36 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:36 executing program 2: 05:11:36 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0xa1f3, 0xffffffff, 0x40, 0x4}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xb515000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda040200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:37 executing program 4: socket$tipc(0x1e, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200001, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:37 executing program 2: 05:11:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda090200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffff00000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:37 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) fstatfs(r0, &(0x7f0000000380)=""/167) 05:11:37 executing program 2: 05:11:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda140200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:37 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4, @local}, 0xa) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfeff000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:37 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x8, 0xf67, 0x1ff, 0x5, 0xff}) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:37 executing program 2: 05:11:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda600200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1280.221413] __nla_parse: 3 callbacks suppressed [ 1280.221423] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:38 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000080)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:38 executing program 2: 05:11:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xff0f000000000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060300000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:38 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.events\x00', 0x0, 0x0) r5 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x0, 0x820c0) r6 = syz_open_dev$vbi(&(0x7f0000000400)='/dev/vbi#\x00', 0x1, 0x2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x20000, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x1, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x20000, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x40000, 0x0) r11 = dup3(r2, r1, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r3, 0x900, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0x310, 0x0, 0x3, 0x4}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:38 executing program 2: 05:11:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060500000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1280.991051] net_ratelimit: 25 callbacks suppressed [ 1280.991058] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.001144] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.006242] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.011337] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.071076] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.076262] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.081039] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.081490] protocol 88fb is buggy, dev hsr_slave_0 [ 1281.086396] protocol 88fb is buggy, dev hsr_slave_1 [ 1281.091405] protocol 88fb is buggy, dev hsr_slave_1 05:11:38 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 05:11:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff7f00000000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda061400000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:38 executing program 2: 05:11:38 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="148000004f3d762ba3728a1cffe242000501624623b26cbf3952d7a48df4"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x1, {0x1, 0x8, 0x800, 0x80000000}}) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1281.204908] validate_nla: 9 callbacks suppressed [ 1281.204919] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:38 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2}) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:38 executing program 2: 05:11:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda066000000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffffffffffff000, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:38 executing program 2: [ 1281.522329] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060801000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1281.659469] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06f2ffff7f00e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:39 executing program 2: 05:11:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x710, 0x7, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4008814) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:39 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xd) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="0800000042000501000000000000000000a3ec61f617cc9b710a415669c5daa9666651be680de9599ba1ede41eb02c0f8a8ef5618160015f2067b82c58c5c4a86bb98613b767d40cd00b57795e79bdb9f0e9a94acc382dab9570dd4fd3b464c54353887886ae1564251bfd032f3d4f44d29a798e2267b53d205877f1de86ea3a4daa2fa92104b147f38454bf9be856a44e1ac99477db0cbe13b5738b281545d2898723781501000000e40a"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/155, 0x9b}], 0x1, &(0x7f0000000500)=""/128, 0x80}, 0xf78e}, {{&(0x7f0000000580)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000600)=""/80, 0x50}], 0x2, &(0x7f00000006c0)=""/204, 0xcc}, 0x8}], 0x2, 0x1, &(0x7f0000000840)={r3, r4+10000000}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000900)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x4e22, 0x3, 0xa, 0x80, 0x20, 0x73, r5, r6}, {0x5, 0x5, 0x7, 0x5, 0xfffffffffffff67d, 0xfffffffffffffc3e, 0x6, 0xffff}, {0x100000001, 0x0, 0x3, 0x8}, 0x4, 0x6e6bbe, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x4d5}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x3, 0x2, 0x1, 0x6, 0x1, 0x40000}}, 0xe8) [ 1282.183115] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:39 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x20, 0x3, 0x1}}, 0x14) 05:11:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000000080)='GPF\b\xe1\x0e\xf0\xcce\xb1y\xfb\xc2\xea\xe5', 0x401, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) 05:11:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060202000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:39 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$inet(0x2, 0x3, 0x29) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="120000000701000500657468305e8636d353842f4b0fbd87ca62"], 0x12) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000200)) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20, 0xfffffffffffffffe, 0x5, {0x0, 0x6}}, 0x20) connect$inet(r2, &(0x7f0000000040)={0x2, 0xfffffffffffffffd, @dev={0xac, 0x14, 0x14, 0x29}}, 0x1a2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 05:11:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:39 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x801, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000380)={0x1f, 0xe, &(0x7f0000000200)="d7d2fd92c1ed331bff90e12f51f9"}) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffbff}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004055}, 0x5) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000580)={0x0, 0x0, 0x4000, 0x200, 0xffff, 0x0, 0x101, 0x0, 0x843}) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) close(r0) [ 1282.486726] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1282.514373] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060203000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:40 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x10000, 0x2) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0xfffffffffffffffd, 0x4, 0x1ff, 0xb05d, 0x6, 0xff, 0x3c}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(r2, &(0x7f0000000580)={0x1, {&(0x7f0000000440)=""/69, 0x45, &(0x7f00000004c0)=""/161, 0x1, 0x1}}, 0x68) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000380)={@remote, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000400)={@mcast1, r3}, 0x14) 05:11:40 executing program 2: ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r1, 0x0, 0x0) [ 1282.680328] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1282.708843] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060204000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1282.785716] ptrace attach of "/root/syz-executor.2"[24740] was attempted by "/root/syz-executor.2"[24741] [ 1282.871488] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:40 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:40 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_thread_area(0x0) close(r0) 05:11:40 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x1000, @local}, 0x775478e401035e66) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:40 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000380)={'security\x00'}, &(0x7f0000000200)=0x54) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060205000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1283.392836] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1283.420640] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x400020) [ 1283.471053] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060206000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:41 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14d0123829a0541bc9287daace66c725fab9050a7800000042cd0401006a93e2ed"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1283.640080] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1283.673210] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000023fffffffda060200000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1283.766435] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1283.815163] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 05:11:41 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) accept4$packet(r1, 0x0, &(0x7f00000000c0), 0x800) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060207000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xa, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:41 executing program 2: socket$tipc(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x400, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x400004, 0x80000000000010) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000340)=0x1) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000380)=""/244, 0xa5543089, 0x0, 0x0) r3 = gettid() socket(0x1f, 0x7, 0xff) sendto$packet(r1, &(0x7f0000000480)="269469b6521553032fdbee154392eb769b625cdee7a5e80eb266a465cbebeda64acfa8b722f00af0d9ea648938f239ba8486da6146a045913d8aa798", 0x3c, 0x8001, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f00000004c0)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)="7d6fba8772b862fc085a36d6f4734966088438060ffaaf83188e92ebe3014434a4c0902e5e547c95966e26dd2e19c714a53015672746ad6736238bf135450fb0d2456567e7f972bcd538ce27185ae4dae9a064503ac236b9a3168b80edef8ce7b7b0a5555b4e33c860913a63a37babb1c1c226b9a9ce3125b45cff90c2989a18e6281ec01147fe0f7d9832c8b51574f3ba435867aa2d8e44887e0fdf36313e3c24577aa21eec6083922522db63e98196a25febbad9e008", 0xb7}, {&(0x7f0000000600)="67aae7937b588609c6495c48d01596a327d48fe057c5137135ab056d37a19057122323084a4de792a0b74b1a9f1c3b4e92215e7f34405ffd196651eb076d66ea96bf3c4778b438c1a86137e2b66adf932c52ab35287fb8781ce055e79b17a722647087b54c0774dcbe30b2edb9e4a30f4380b7447a3a29ba51e24d400535133ff4e0f5a03b874a9816f9b9f2ed3ab25987c420a1a6669bf94fc1a3640aa45729", 0xa0}, {&(0x7f00000006c0)="746520064443e84c8e60051d084496fa1a59dae7322d5d6ade3c8f8e27271c89ba86e4e9110b9488b3ca2807d9dfdb294f2bf3c89071771b8578ca945e7784fc4490c6dcacce817e89ea2cf5b0b71c14726d74778813f78e95b92aa792102614f665b1edaf754a6893a4343797a6bf25d5fd708d84ed580597b699d4e5c50c63effedcc05ae8c9e12d048c9b27df284547f2c68c96b27b65770a207cb5b0ac306318cfef3b934eed9d84fa0c05f84418e6b91d31b274c1fa25f7f10cc899efc051a6d257621917f9870b7b588efdaf45c0c67339e1da4bfa0114e32d7813ac5d5a31cdbc5901576345d4", 0xea}, {&(0x7f00000007c0)="b5f332dedb8e31d4fc110e1e8b7a4eb8dcd007d05823d65580c279056013fe8eff2f6a34db6ea43e4a53e2fc127894b0f327973e4efd9a77608bb2e773d2feb405563651ce2b14fe7832db351a004c92ca15213800fe392ef858708e414d02638690dee11f7a6640fd0944b5428e428131a50ca15a", 0x75}, {&(0x7f0000000200)="dd6f46c15e19bbe1f6b3a1c0a8277313691e1899b9589036276857c0", 0x1c}, {&(0x7f0000000840)="ac44ff9f04a6343107ad7b21d7e2b81f19c293f670718d0baa0716598384161e0738d168c6fa9d469e901395b2fabb2edaf56c2ef55ce99b74afdfd7943e4027f8fcd109cb3a8e94349c28cf1817ba438c0e1f8531299cd26ab220b7900ead06da982566991e4f32c09a712b919b90cad6bf53436bb23a9e2735f13aaa92134fda3634f3c5896b0d7b0b88052f4f119cf236d6a9151d083562", 0x99}, {&(0x7f0000000900)="b73b4f4b636efd409be0b588d831aa6c117877b8ec59adccb81c8712f394faf672d818c42af83124c870cd5ad357ebb7c79f9bf889ef9bbc7a3299773d5a7004440125beaa284a98a4ba609687172bbf657b4157527a484d8251ec41e3fe7f6d28a492387fa8f1d2e3c2c031701250b783b4b7750a23608417ce3b92a98caabfb29ebe65ee9b401ce09c673dc2c71c89c7f8fc9e31ffc76722f1a13056c5a40afb64e76aa4255dffd22993814134d5b4d505ccc415500268c0640f735a400018cef4d8142c56f04c89bec4c4b293f768a9569b43b856fe9d71b99a04e26ccbd544618acc5e", 0xe5}], 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="d000000006010000b20000009b3159ebb69533a76acbdaac01a673b50a2f5eb591769733124447ab2b753025af68ff547f0e2e9b848e049dde35d1b944bdf2a06cadfdc8e6c6d8d1000aedc13c0650b042be86374b69a11d8e3127766d027dcfff8fc5a4e0b3a66309fd0b46aa1d4f118aafaf6a0d6216b8b7de2c30c1554fa0473935d13b54b990b1b18327ece30e53fc863389b782eee56d6294efc665d19e18396b8bdf2c05fe63f8dff55f6fdfe86f67d3bee3ec1e187ca14588c6bd16c96fcbc8ed7bedc074"], 0xd0}, 0x4000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x24000004) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:41 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1284.371444] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060208000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xc, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xe, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:42 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1284.541255] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020a000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:42 executing program 2: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000006380)=""/4096, &(0x7f00000010c0)=0x1000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000002480)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r3 = syz_open_dev$sndpcmc(&(0x7f0000001140)='/dev/snd/pcmC#D#c\x00', 0xcac, 0x8800) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000001180)={0x0, 0x6c}) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001100)='/dev/null\x00', 0x80000, 0x0) io_setup(0xfee, &(0x7f0000001240)=0x0) io_cancel(r5, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000001280)="35e7a3199a69f76a9113190648efe61cdb350960b98dcfd61987f492a1d3bca73c340678aab08416ec2f6f5445032fcd4d2a46f7456949ab49169a07bbc54e5a602f23b85a4df4c1d2e8899cd3555c75242c1bde31bb405bd86c6705e41b3c", 0x5f, 0xffffffffffff0000, 0x0, 0x1, r3}, &(0x7f00000013c0)) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000007380)={0x0, 0x0, 0x2080}) recvmmsg(r1, &(0x7f0000001000)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, &(0x7f0000000540)=""/175, 0xaf}, 0x1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f00000006c0)=""/195, 0xc3}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000000200)=""/27, 0x1b}], 0x8, &(0x7f0000000a40)=""/32, 0x20}, 0x32f77f4c}, {{&(0x7f0000000a80)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/24, 0x18}, {&(0x7f0000000b40)=""/190, 0xbe}], 0x2, &(0x7f0000000c40)=""/142, 0x8e}, 0xb94e}, {{&(0x7f0000000d00)=@l2, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/85, 0x55}, {&(0x7f0000000e00)=""/215, 0xd7}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/92, 0x5c}], 0x4, &(0x7f0000000fc0)=""/64, 0x40}, 0x3f}], 0x4, 0x40000002, &(0x7f0000001080)) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1284.748989] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:42 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x4, 0x6, 0x5, 0x20]}) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) read(r0, &(0x7f0000000440)=""/169, 0xa9) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x6b6b7a5c59bb3ae3, r2}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:42 executing program 5: socket$tipc(0x1e, 0x4, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x8000}, @in6={0xa, 0x4e21, 0x0, @local, 0x1}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x6000000000000000, @mcast2, 0xffff}], 0x74) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000007b0005010000000000000000007cd11d18a55312000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x10, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020c000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:42 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x6d09}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r2, 0x0, 0x10005, 0x400000004000002) 05:11:42 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x3c, 0x0, @in={0x2, 0x4e23, @multicast2}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r2, 0x0, 0x1, 0x4}}, 0x20) [ 1285.327620] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x48, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xc00, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020e000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x68, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1285.535302] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:43 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x2a) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:43 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x11, &(0x7f00000002c0)={0x0, @in6}, 0x98) close(0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000f1dff8)={0x0, r4}) 05:11:43 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020f000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x60, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1286.285005] validate_nla: 10 callbacks suppressed [ 1286.285015] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1286.320139] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 1286.331633] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x68, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060210000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:43 executing program 2: socket$tipc(0x1e, 0x4, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x8000}, @in6={0xa, 0x4e21, 0x0, @local, 0x1}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x6000000000000000, @mcast2, 0xffff}], 0x74) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000007b0005010000000000000000007cd11d18a55312000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1286.447817] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:43 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000500000000000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:43 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)=""/247, &(0x7f0000000080)=0xf7) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1286.523351] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060248000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1286.643135] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1286.677466] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:44 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000200)=0xd8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c167711ac0ad5527996469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x4, 0x5, 0x9, 0xff, 0x0, 0x0, 0x5, 0x9, 0x1, 0x7, 0x9, 0x80000000, 0x57a3, 0xffffffffffffffc9, 0x9, 0x5, 0x8ddb, 0x6, 0x4d, 0x3, 0x3, 0xe39, 0x3ff, 0x5, 0x0, 0x7, 0x1, 0xf, 0x80000, 0x0, 0x8344, 0x0, 0x4, 0xfffffffffffff10a, 0x7, 0x7, 0x0, 0x49, 0x2, @perf_config_ext={0x8000, 0x4244}, 0x20100, 0x21, 0x2, 0xf, 0x81, 0x7ff, 0x3}, r2, 0xd, r1, 0x9) r3 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000000c0)={0xffffffffffff0000, 0x0, @value=0x6}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x74, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06024c000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060260000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1287.081167] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1287.100078] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1287.190401] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1287.207306] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1287.219788] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1287.231131] net_ratelimit: 24 callbacks suppressed 05:11:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060268000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1287.231139] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.241265] protocol 88fb is buggy, dev hsr_slave_1 [ 1287.246443] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.251588] protocol 88fb is buggy, dev hsr_slave_1 05:11:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1287.300864] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1287.311041] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.311091] protocol 88fb is buggy, dev hsr_slave_1 [ 1287.316237] protocol 88fb is buggy, dev hsr_slave_1 [ 1287.326717] protocol 88fb is buggy, dev hsr_slave_0 [ 1287.331846] protocol 88fb is buggy, dev hsr_slave_1 05:11:44 executing program 2: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0xffc99a3b00000000, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1287.374019] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:44 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000380)=""/147, 0x93}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x40000) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000200)={0x1000, 0xf004, 0x25c00000, 0x7fff, 0x8}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:44 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x3}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06026c000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x103, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1287.577142] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1287.611316] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1287.871107] protocol 88fb is buggy, dev hsr_slave_0 05:11:45 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b637b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400000000000000) 05:11:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x26c, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060274000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:45 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) getdents64(r0, &(0x7f0000000380)=""/4096, 0x1000) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000001380)='security.capability\x00', 0xfffffffffffffffe, 0x0, 0x1) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x4}) 05:11:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06027a000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1288.025815] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x300, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:45 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x79, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000042000501000000000000000000000000d6c6a2fd7b9461f40dd8521e961fe3d6fbaf82543fe58b069b2e808558509d3c467e6a34c47879cc9b10996fd9ffb680442fb8005fb576c8da53b6160cd5eaac86bcbd8013eaffea3fb8b8d6156901fd4047684ac9d52c954dc3393a04c6eaa2e2b8a59e8aee0780503f84f9979d425e3aac0f40c865cf514d445566c04fcde0740ef59093a95f995011d53866034d703dc4d49c20dc7cd8251f4e7c08fbf42911b5b440bc16998ef3b15f7bdeb98b"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x54, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x8001, @local, 0x2}, @in6={0xa, 0x4e22, 0xe00000000000, @remote, 0x400}, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x82}]}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000440)={r2, 0x3, 0xabc4}, 0x8) chdir(&(0x7f0000000500)='./file0\x00') syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x20000) readlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/137, 0x89) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) linkat(r3, &(0x7f0000000480)='./file0\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x1400) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602f0000000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1288.228963] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:45 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_proto_private(r3, 0x89ea, &(0x7f0000000100)="5e1e6630ba0ec9eee408967f66843880f99b22489a1f9b8a400ce656d8e44ebd046dd76e4b51cac2bbb1ec8c800a3caf11daf1565e0cb8f12ab5fbd7f45f8fc59529e11f8cd30cf7654ff0002fbc75aee3618459123fcff4a3654bce733df48665d0dee6c7a98b903b0f4e0296924301") setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000200)={0x190, 0xffffffffffffffda, 0x5, [{0x6, 0x200000, 0x0, 0x3ff}, {0x0, 0xffffffffffffff75, 0x15, 0x7, '[posix_acl_accessbdev'}, {0x2, 0x2, 0x4, 0x3, 'eth1'}, {0x5, 0x10001, 0xd, 0x50dba38d, 'ppp1ppp0wlan0'}, {0x3, 0x2, 0x0, 0x7}, {0x2, 0x100}, {0x6, 0x80000000, 0x2c, 0x9, 'Nuserkeyring.keyring-,-vboxnet0keyringwlan0&'}, {0x6, 0x8000, 0x5, 0x3f, '\rGPL^'}, {0x0, 0x4, 0x11, 0x7, 'ppp1vmnet1@loGPL['}, {0x3, 0xffffffffffff8000, 0xe, 0x0, 'cpuset&@}nodev'}]}, 0x190) 05:11:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x301, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602f2020000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:46 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:46 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0xffffffff, 0x8000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200050100cb47000083ebd87900000080000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000600)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x8400, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000005c0)={r3, 0x80000000}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000480)={r3, 0x7a, "0894b5330755ff39a6975967147cc43a9a3690ce6ce6df6d1496c6838463c696a5d06bec345b7a41c3b1e98c0e46163e1d4cd78bceb101f1f14c71c7cc3058079f937964f565000cb29eb7f0e13a502179f6db831c136bc60d82290dbb780c059f1551a86c704e9da176ff3c8e24538791cb1b258e4a6403d0f5"}, &(0x7f0000000540)=0x82) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x500, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200030000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:46 executing program 2 (fault-call:7 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x600, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200050000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:46 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14001d0042000501000000000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x1004008, 0x4) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:46 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000200)="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", 0x1000) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) fcntl$setpipe(r2, 0x407, 0xb31) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x700, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200060000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:47 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db7de5781fe0416ea131c8dcbb9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x43ffe, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x8, 0x8, 0xfa00, {r2}}, 0x10) 05:11:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xa00, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200070000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602000a0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xc00, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x16, 0x8, 0xfa00, {r2}}, 0x10) 05:11:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602000c0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:47 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x4080, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8004700d, &(0x7f0000000200)) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000380), 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(r2, 0x0, 0x386) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:47 executing program 0: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) socket$packet(0x11, 0x3, 0x300) bind$inet(r3, &(0x7f0000000340)={0x2, 0x10000, @local}, 0x3) mq_timedsend(r1, &(0x7f0000000200)="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", 0xfc, 0x800, &(0x7f0000000180)) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x32, 0x1, 0x11, 0x2, 0x6, 0x10001, 0x5, 0x166}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x25}, r4}, 0x14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xe00, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x200001c8, 0xfa00, {r2}}, 0x10) 05:11:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602000e0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:48 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) getpeername(r0, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x40, 0x880) r3 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0xf4d, 0xa0000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000440)={0x3, r3}) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:48 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x200001d0, 0xfa00, {r2}}, 0x10) 05:11:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf00, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x15b5, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1290.800177] __nla_parse: 12 callbacks suppressed [ 1290.800187] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602000f0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x7) 05:11:48 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042008501000000000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1290.946665] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:48 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x7, r0, 0x1}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602db1d0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x200001d0) 05:11:48 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000042000501000000000000008000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000200)=0x4) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1291.569250] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1291.596220] validate_nla: 12 callbacks suppressed [ 1291.596229] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:49 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d675a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032000000000000000000000000"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000440)=""/146, 0x92}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/234, 0xea}, {&(0x7f00000000c0)}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000000600)=""/121, 0x79}], 0x9, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 05:11:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200200000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x101500, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x60000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000400)=r1) socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000042000501000000000050a682abe98358d400000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000480)=""/211, 0x30f, 0x0, 0x2}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1291.752868] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1291.800021] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4800, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602003f0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1291.927956] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1291.947808] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1291.959181] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:49 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0xd9, 0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200400000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c00, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffbf, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd3f, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1292.511556] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1292.537336] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:50 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200480000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5865, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:50 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000039cbde3b1113a818000000ff7f00000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x9) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffec7, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x1000}}, 0xffffffffffffffe7) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000440)={{0x0, 0x8}, 0x1, 0x7, 0x100000000, {0x5, 0x10000}, 0x800, 0x7}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 05:11:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602004c0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1292.796587] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1292.817458] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x420000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000180)=0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 1292.942658] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:50 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r3, @ANYRES32=r3, @ANYPTR, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRES16=r2, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0], @ANYRES64=r3, @ANYRES32=r2, @ANYBLOB="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"]], 0x36) socket$inet(0x2, 0x3, 0x29) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 05:11:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060265580000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x20000, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000580)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000440)="de63a51a64588cf56875023399a79581ffaffbf91ebac3c02cd40edc797fc41ffbe933e9860c83f05b12fa930018ec1aca55e49f89ee67df32398daf67b6de9080cebc671c252675b0864f867598aac8068d9807d9097b7e82569fa504bab827631f124c7aff0d426a2443848987c97be8e89514c4e83223e2c6448be78aa843a7ad870dc041b2091e46fe1a2c4e90d96444f38f5fad5bd84cb35f6e8371c0372c6ff82ccc60afe95bdbb519a3260a18a53bb0a6178d12c8d141ffad54ad26be8dfc09febf72338a032218") ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000380)=0x80000001) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x4, 0xfa00, {r4}}, 0x10) r5 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0405405, &(0x7f0000000140)={{0x0, 0x1, 0x20dc, 0x2, 0x986}, 0x41, 0x0, 0x6}) [ 1293.463575] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1293.492422] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0xc, 0x4, 0x9}) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=""/248, 0xf8) ioctl$DRM_IOCTL_GET_STATS(r1, 0x807c6406, &(0x7f00000002c0)=""/168) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x5, 0x0) 05:11:51 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x2, 0x10240) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000004c0)={0x2, 0x5}) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195f74f26aeb9f58a9d6709b47629a58e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76ae333bed53207e4a6b1493b06015959e2a3c80c4ba8be165e905e8d015b3a163ffc"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6558, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200600000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000004c0)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000540)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @remote}, {0xa, 0x0, 0x200}, r3}}, 0x15) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x8, @mcast2, 0x1000}]}, &(0x7f0000000440)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r5, 0x8000}, 0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 05:11:51 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="a19d8afe485eaef263a56523", 0xc, 0xfffffffffffffffd) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000400)=0x2) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$sndseq(r2, &(0x7f00000004c0)=[{0x8, 0x0, 0x1, 0x81, @tick=0x6, {0xffffffffffff7fff, 0x9}, {0x8, 0x7}, @addr={0x7dfc, 0x8000}}, {0xfffffffffffffe00, 0xd4e, 0x9, 0x1, @time={r3, r4+30000000}, {0x8001, 0x5}, {0x1, 0x8}, @quote={{0x1, 0x6}, 0x4, &(0x7f0000000480)={0x160, 0x4, 0x1, 0x6, @tick=0x1, {0xffffffffffffff20, 0x7fff}, {0x4, 0x2}, @connect={{0x3e, 0xc200000000}, {0x7fff, 0x101}}}}}, {0x0, 0x100000001, 0x0, 0x8, @tick=0x10001, {0x2, 0x81}, {0x0, 0x7}, @raw8={"df12e0c4de0db47e80b2a1ed"}}], 0x54) keyctl$clear(0x7, r1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1293.726585] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x264000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000480)=0x1, 0x4) [ 1293.774816] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060258650000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6800, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:51 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14008d8c8031050000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x321000, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3f, 0x10000, 0x0, 0x1f, 0xd, 0x4, "ba1934fce58d92fe87f1c1096512fa0ad3f7b2251cd667454d25cb34acd8bcc8668a4f04c2031add1c19525dc570a0a99abb52a00812ef1a831efdefe2d6f947", "c183f3180c866dbb3162a336e1c257ea254dbfe6e1fb5ec0216c00a831df1db4c23207705ea3399efbcd1d9d7c3b0e3453dfe733c3cca648b43befec195eda80", "04114245e5a5e186e23d30de1935de8bfc8d0da20c102ac36d3f2e1a6015c1df", [0x100000000, 0x2]}) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) acct(&(0x7f0000000200)='./file0\x00') write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1293.928906] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c00, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200680000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1294.072431] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1294.121044] net_ratelimit: 25 callbacks suppressed [ 1294.121053] protocol 88fb is buggy, dev hsr_slave_0 [ 1294.131132] protocol 88fb is buggy, dev hsr_slave_1 05:11:51 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r2, 0x6, &(0x7f0000000140)={&(0x7f0000000100)=""/52, 0x34}) r3 = request_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='vmnet0%self\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="f90fa19bbf68561a36be084048390ccd6844ffaaf4ac0eee7944d615b6c0e9e48f6b9c980b6a61823374e0dd6a1da5b3de25e7bcfeb49875a6807d8b8d9b35599ac0bcb2eee0cc9edb2aae0eb9e9655872fb28369fe6de63a4a3488a79a3b864be1194332ae70131e4243ebb7832ae20cc1f7963094528fae5ee0bc3092583c4527220230cca7eeaccb28148b709fdd23ae7cdec16181b6a6c048a6273641961019f21cf8bc77994af06829a9c305ed7fdc97e1e3ead82ecea2454e4a2bfcb154acf01804f600fa4fb9466146b5e0ca7044ca64f843b", 0xd6, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt(r5, 0x6, 0x2, &(0x7f0000000400)=""/204, &(0x7f0000000500)=0xcc) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 05:11:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x3c94, 0x8000) write$FUSE_IOCTL(r3, &(0x7f0000000180)={0x20, 0xffffffffffffffda, 0x7, {0x2, 0x4, 0x5, 0x80}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602006c0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c02, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:52 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x3b3, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[]}, 0x1, 0x0, 0x0, 0xbdd15d477464d8d4}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000440)=r1) 05:11:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200740000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7400, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x100000000, 0xa0900) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x1, 0x1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1810820}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x30, r4, 0x408, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x240000d0) 05:11:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602007a0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a00, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:52 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5f15f2694200050100000000080000f100fc000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2) 05:11:52 executing program 0: clock_nanosleep(0x7, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602f57f0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8100, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000a00)='trusted.overlay.upper\x00', &(0x7f0000000a40)={0x0, 0xfb, 0x79, 0x4, 0x2, "3f6fe46829550daa3c7ee772fa852ccc", "0168b19b48eaec249706dca18512da96be341df9c166bd184a622438cd105b8ba2ea456cf13768308555f8ac83de777e754ba6d8ed14da883e3faac143e7a285410588f8161e0c2b135ebfd67d251a93e873b00c14caa61fc64244ff79f0f67fb806230d"}, 0x79, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) openat$capi20(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/capi20\x00', 0x40040, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x10000002a, 0xfa00, @id_tos={&(0x7f0000000800)=0x7, r1}}, 0x20) r2 = semget(0x2, 0x0, 0xa4) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000840)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x8, "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", 0x6c, 0x7, 0x5, 0x3, 0xfff, 0xfa4c, 0x7ff, 0x1}, r1}}, 0x128) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000740)={{0x9, r3, r4, r5, r6, 0x101, 0x1}, 0x1, 0x92ce, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r7}}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000200)='vegas\x00', 0x6) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000000ac0)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r7}}, 0x10) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x2042, 0x0) renameat2(r9, &(0x7f0000000980)='./file0\x00', r0, &(0x7f00000009c0)='./file0\x00', 0x3) accept4$tipc(r9, &(0x7f0000000300)=@id, &(0x7f0000000780)=0x10, 0x80000) 05:11:53 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) linkat(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000) 05:11:53 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) write$smack_current(r0, &(0x7f0000000200)='\\cpusetem1\x00', 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xb515, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200810000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0xffffffffffffff23, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1295.631065] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.631109] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.636180] protocol 88fb is buggy, dev hsr_slave_1 [ 1295.641291] protocol 88fb is buggy, dev hsr_slave_0 [ 1295.651341] protocol 88fb is buggy, dev hsr_slave_1 05:11:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06021ddb0000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x2, 0x0, [0xffff, 0x3, 0x3, 0x0, 0x0, 0x4, 0x4cf, 0x3f, 0x2, 0x100, 0x2, 0x1, 0x8, 0x1, 0x6]}, {0x0, 0x0, [0x101, 0x1, 0x2, 0x4, 0x800, 0x1, 0x3722, 0x3, 0x8000, 0x20, 0x100000001, 0x8, 0x2, 0x4, 0x3, 0x7]}, {0x31, 0x0, [0x1f, 0x1000, 0x3, 0x7fffffff, 0x6, 0x100000000, 0x1, 0x3, 0xd226, 0x8000, 0x9, 0x3, 0xff, 0x3, 0x20, 0x7]}, {0x0, 0x0, [0x4, 0x11c1, 0x1, 0x9, 0x1, 0xf7a, 0x5, 0x4, 0x10001, 0x3ff, 0x618, 0x7ff, 0x0, 0x7, 0x4, 0x100]}, {0x0, 0x0, [0x4, 0xfffffffffffffffb, 0xa00000, 0x2, 0x7ff, 0x10001, 0x4, 0x7, 0x7, 0x5, 0x0, 0x5, 0x4, 0x1b, 0x9, 0x3]}, {0x20, 0x0, [0x4, 0x7, 0x2b1b4301, 0x5, 0x0, 0x3, 0x9, 0x2, 0x6, 0xfffffffffffffff8, 0x101, 0x8000, 0x9, 0xc1, 0x3, 0x7]}], r1, 0x1, 0x1, 0x1b0}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1295.842175] __nla_parse: 8 callbacks suppressed [ 1295.842186] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1296.191137] protocol 88fb is buggy, dev hsr_slave_0 [ 1296.196316] protocol 88fb is buggy, dev hsr_slave_1 05:11:53 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x100, @local, 0x800}}, 0xff, 0x8}, &(0x7f0000000080)=0x88) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r4, 0xff, 0x9}, 0xc) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:53 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x41020000004) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfeff, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x4, r1, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast1}}}, 0xa0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200f00000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:53 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0)={0x3f}, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [{0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '/dev/admmidi#\x00'}], 0xa, "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"}, 0x104c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) getgid() [ 1296.622637] validate_nla: 8 callbacks suppressed [ 1296.622647] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xff0f, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1296.670019] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:54 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000000c0)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) r2 = open(&(0x7f0000000140)='./file0\x00', 0x60c041, 0x84) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x30002}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 05:11:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060202f20000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1296.796059] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06027ff50000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1296.850561] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1296.983702] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:54 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000100)=0x8) 05:11:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffe, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0xffffffffffffff6d, 0xfa00, @id_tos={&(0x7f0000000140)=0x5, r2, 0x0, 0x0, 0x1}}, 0xfffffffffffffedf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0xc11e45d061de3811) 05:11:54 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000000000000000c3b359f2969bcaa475065d9dafbe5000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200400300e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e0000001c008183ad5de087185082cf0124b0eba06ec400002339a00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x9, @empty}, {0xa, 0x4e21, 0x4, @loopback, 0x5}, 0x7ff, [0x2, 0xfffffffffffffff9, 0x2000000000000000, 0xfffffffffffffff7, 0x80000000, 0x4, 0x6a, 0x2]}, 0x5c) socket$tipc(0x1e, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4ff36b1493b0607000000be167ea500003ac70ab7e832"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = dup(r0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1297.587682] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1297.606905] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1297.620723] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200034000e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x34000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1297.711044] protocol 88fb is buggy, dev hsr_slave_0 05:11:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x1, @raw_data="10256c4ace3991ee41523234a858cf174eaccbfaf7d95cdddfa75dc1414d5c326cb1b105833dea3281f2b5fb1c2db4b0e9f2a445ea76305469dc7015a692e8a82398ac121e603b076b42298d995131803e26fa5342679faf1e4105981740dba1da00d07d12ee7a7b15b27ad9ac1de0f1b3e340053405b91d0b18d58e3c843dd09579c7e2fe9aedd2fc26b3f77f12a278e10ff616591a9b1742a6f0125270483dba8fbddde9d46de6d61831180bd58a9f5d6dabf6a04180242bb2491ff2530f1338dfa1a9797d2d64"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) r4 = socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x40800) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000540)=0x0) ptrace$peekuser(0x3, r5, 0x6) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140), 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 05:11:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x40000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1297.774759] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1297.800174] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602fffff000e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1297.877003] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1297.944329] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:55 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x7, 0xffffffff7fffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x400300, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000001e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000180)=[0x4, 0x8, 0x7, 0x89, 0x7, 0x9, 0x7fff], 0x7, 0x1c3, 0x1, 0xbe95, 0x7e0ef053, 0x7, {0x101, 0x589, 0x1, 0xff, 0x2, 0xe3, 0x3, 0x23, 0x6, 0x3, 0x96, 0xff, 0x400, 0xffff, "f7104a3b4bd9f71c87d15cd7a4800b647564cd02eea8b3cf31d998d14aa92d11"}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000340)=0x8000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$input_event(r3, &(0x7f0000000580)={{0x0, 0x2710}, 0x7, 0xf8a0, 0x3}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000500)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r2, r0}}, 0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000200)=0x3f) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) readahead(r0, 0x3, 0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000380)={0x5004, 0x10000}) 05:11:55 executing program 4: socket$tipc(0x1e, 0x7, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfffffffffffffff8, 0x200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x69, 0x77, &(0x7f0000000140)="b36655352f597d3225b0ccd98aa296d5eddcee828b3f1de86c9ee2f38fe842718fea84933d1221b8540a644f11026ecbc22857aa46fba00d5deee2e85b072941e238599accf800cb478777ea7fb59e2dab10b020074eaa64cd4628265d4693760ad6083f83f206602f", &(0x7f00000001c0)=""/119, 0x23}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x20082, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:55 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x161580, 0x0) write$vnet(r1, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0x99, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffff, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1298.543294] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1298.572036] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80585414, &(0x7f0000001a00)=""/120) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0xfffffffffffffedc, 0xfa00, @id_tos={&(0x7f00000019c0)=0x1, r1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) recvmsg(r2, &(0x7f0000001940)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000880)=""/164, 0xa4}], 0x1, &(0x7f0000000940)=""/4096, 0x1000}, 0x40002000) 05:11:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000002e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:56 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000200000000000000ffffffffffff00000000"], 0x14}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000002540)='/dev/radio#\x00', 0x2, 0x2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000002580)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000380)=""/188) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) prctl$PR_GET_KEEPCAPS(0x7) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000024c0)={0x8, 0x1000}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) recvmmsg(r1, &(0x7f0000001400)=[{{&(0x7f0000000440)=@ipx, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/235, 0xeb}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x3, &(0x7f0000000800)=""/197, 0xc5}, 0x8}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000980)=""/219, 0xdb}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/170, 0xaa}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/109, 0x6d}, {&(0x7f0000000c40)=""/234, 0xea}, {&(0x7f0000000d40)=""/228, 0xe4}], 0x8, &(0x7f0000000e80)=""/229, 0xe5}, 0x100000001}, {{&(0x7f0000000f80)=@xdp, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001000)=""/185, 0xb9}, {&(0x7f00000010c0)=""/113, 0x71}, {&(0x7f0000001140)=""/59, 0x3b}, {&(0x7f0000001180)=""/46, 0x2e}, {&(0x7f00000011c0)=""/217, 0xd9}, {&(0x7f00000012c0)=""/219, 0xdb}], 0x6}, 0x5}], 0x3, 0x40000000, &(0x7f0000002480)={0x77359400}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, 0xffffffffffffff9c}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000002500)=0x1, 0x4) [ 1298.709812] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1298.740602] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000003e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1299.006163] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:56 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000002c0)=0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x7, 0x100000001, 0x301f, 0x5, 0xf, 0x2, 0x0, 0x2}}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080), 0xfffffffffffffe4d}, {&(0x7f0000000100)="164945723bf67dfe052994bbdf9d9a9dc69bb81ab87933651866e9de37adf9d836f9e90348e4dece5892bd201660eed3effa9345375abfb7ce07836a48524335f412fa26cc84fd762e368aa87d384ba54982a2f5062dbfd0d0377112139388f1b5ffde28bdda3b59a5ebf3873415b7516ff6b684df1fcbcb8ca54a7fbd44c439a4d7097cc213c903ea116beacc64b826954e88375ac43d2f95c8dcbb72d9c252464e29", 0xffffffffffffff04}, {&(0x7f0000000200)="3bb66bf85930e731bec448007aa294429ee0010a8c8140acb2cb2317bbd721081f44ebfa5abaef08d054270c912223e852321f9d702cb867be5b111e07a9585dc31911d043f0f8dcb9df609a4cf9dbcebbdbc41312ee38ec", 0x58}], 0x3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 05:11:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:56 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000640)={@loopback, @local, r1}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x80) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000380)=0x4) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000f1dff8)) 05:11:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000004e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) prctl$PR_MCE_KILL_GET(0x22) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x4, 0x6}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:56 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x8840, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000164ff0)={0x0, &(0x7f0000000080)}, 0x8) r4 = syz_open_dev$admmidi(&(0x7f00000012c0)='/dev/admmidi#\x00', 0x2, 0x150d1c6b1b09fa8f) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300)={r5, 0x80000000}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001740)={r6, @in6={{0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x2}}, 0x100}, 0x88) rt_sigprocmask(0x5, &(0x7f0000000580)={0x2}, &(0x7f0000000480), 0x8) sendto$inet(r4, &(0x7f0000000780)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32ef4da7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b1ae066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000600)) lstat(&(0x7f0000001600)='./file0\x00', &(0x7f0000000640)) io_setup(0x10001, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r8, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5) io_destroy(r7) fcntl$setsig(r3, 0xa, 0x6) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={r6, 0xfffffffffffff800}, &(0x7f0000000740)=0x3b405abc2120117d) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={r9, 0x1}, 0x8) socket$xdp(0x2c, 0x3, 0x0) 05:11:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000005e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1299.493071] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1030000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffd51) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) clock_settime(0x4, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @rand_addr, 0x9}, {0xa, 0x0, 0xfffffffffffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380), 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) set_tid_address(&(0x7f0000000200)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:57 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fchdir(r1) recvmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000480)=""/147, 0x93}], 0x2, &(0x7f0000002740)=""/218, 0x250}}], 0x0, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x4, 0x400080) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4a5d00d32aae559b}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x90, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa8a}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x78b3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc743}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x90}}, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0xfffffffffffffedf, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x96ad}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000440)={r6, 0x400}, 0x8) accept4(r2, 0x0, &(0x7f00000000c0), 0x0) write$vnet(r3, 0x0, 0x92) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000200)={0x0, 0x1, 0x7, 0x7fffffff, '\x00', 0x9}) [ 1299.673803] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1299.711393] net_ratelimit: 7 callbacks suppressed [ 1299.711401] protocol 88fb is buggy, dev hsr_slave_0 05:11:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000006e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1299.721381] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.726520] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.731640] protocol 88fb is buggy, dev hsr_slave_1 05:11:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000180)=0x1c, 0x800) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000380), 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) read(r0, &(0x7f0000000440)=""/166, 0xa6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 1299.791033] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.796176] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.801050] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.806329] protocol 88fb is buggy, dev hsr_slave_1 [ 1299.811536] protocol 88fb is buggy, dev hsr_slave_0 [ 1299.816611] protocol 88fb is buggy, dev hsr_slave_1 05:11:57 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0xffffffffffffff1c) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000007e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:57 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x30000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(r0, 0x5421, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000700)=0x0) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000800)={&(0x7f0000000740)=""/183, 0xb7}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440)={0x2, 0x0, [{0x105000, 0xa5, &(0x7f0000000380)=""/165}, {0x105000, 0x0, &(0x7f00000000c0)}]}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000200)) 05:11:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0xffffff3c, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x119) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:57 executing program 4: socket$tipc(0x1e, 0x7, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="03000000420005017b66b8a65cfc5e9ea5a1bf909e967195b74f26d0b9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8b5f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be16150f01923a163ffc703289fd743f4f5953004487ef30a5cb2a8e795641b9c8e08e5f57fa033b38627ff5990909f2f65635842fbd3f9e"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000008e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:57 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x10802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x252, 0xfa00, {r3}}, 0x10) 05:11:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:58 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0xfffffffffffffe9f, &(0x7f00000003c0)=[{&(0x7f0000001480)=""/4096, 0xfffffffffffffed7}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000000400)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x400000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="00ac00000000000000000000000000000000"], 0x14}}, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000000ae8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:58 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) memfd_create(&(0x7f00000000c0)='\x00', 0x7) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:58 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) socket$inet6(0xa, 0xa, 0x10000) 05:11:58 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:11:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000000ce8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:58 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0xe0, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x188, 0x0, 0x0) r1 = semget(0x3, 0x3, 0x200) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000140)=""/182) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1301.461786] __nla_parse: 6 callbacks suppressed [ 1301.461796] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:58 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r0, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 05:11:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000000ee8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:59 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000002000001000000000000000000000000d9ad9869e169e0bf73788d513427a139839452b0f66b99412a1fb1466a722b147fef324e46bc225597576879fee6105e7333b581a4179254888d984da4e7308b554684b01a2fb09c95ebb7de7bfd10548820f82f0464a7bbb348ba6c23dbd0cd2941944e8387e2177ce64e076fb7e31d8f12b047d44a217d6eb67f4b3fb9f195f2f95871f2c87fc28bfc462c10809725b0223a1bda6e66e033f0c1efe498679002d729d922af85ab966232b9372005df1e8072c5012999114571"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1301.712525] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1301.741555] validate_nla: 5 callbacks suppressed [ 1301.741592] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000000fe8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1301.889417] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:11:59 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x100000001, 0x81}, 0x88) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5) 05:11:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000010e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:11:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:11:59 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) write$UHID_CREATE2(r2, &(0x7f0000000440)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0xd, 0x0, 0x1, 0x1, 0x200, 0x0, "edab36251320ba5a9581c31730"}, 0x125) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:11:59 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x47a7, 0x2, 0x100, 0x10, "6e6ffb6c40317196b80a2b591086ae889cbe7785a3c7216485816c34436848b8c20ca2ce76e3232f8d8c39866476f016bc79d2dee2de534138a87d0069627739", "3a1bd83cfec7b732b6e7c836755fa8c84cbfeb046c19ec51b0424298de8f545a", [0x8, 0x6]}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r4 = dup(r0) ioctl$TIOCLINUX3(r4, 0x541c, &(0x7f0000000180)) pipe2(&(0x7f0000000140), 0x84800) [ 1302.447128] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1302.475662] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:11:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xa000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:11:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000020e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:00 executing program 5: socket$tipc(0x1e, 0x0, 0x0) getpid() r0 = gettid() rt_sigqueueinfo(r0, 0xfffdfffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x8, 0x24000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000500)={@local, 0x1b, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000018742e7d0a004246eecc48ae0ad17b00000000000000000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'bond_slave_0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0xfffffffffffffdb8, 0xfa00, @id_tos={&(0x7f0000000180)=0xffff, r1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffd3a, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x400000, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000440)={{0x1, 0x3, 0x9, 0x1, 'syz1\x00', 0x64d}, 0x6, 0x20000004, 0x1, r4, 0x2, 0xffff, 'syz0\x00', &(0x7f0000000340)=['/dev/infiniband/rdma_cm\x00', '/dev/infiniband/rdma_cm\x00'], 0x30, [], [0x3, 0x0, 0xff]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1302.619937] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1302.638002] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:12:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xc000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000003fe8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1302.770257] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1302.807772] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:12:00 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="bb91640aaf4c540a369fbf637532f034fed434bb27bef6132f0b977a511f4469fad4f161934a7844bb60512b168d5d2de6e99e9f55de8c1b11347b105303a81085727ce00450ae9cac71ad8187af80fc8be1d8ba6318a98fa3bf23ab02", @ANYRESHEX=r1, @ANYBLOB="ceef85ba48b23e918367ed98909d9577bf8a30b986d337f9a63e2ea2bfdfb972ea77ae57e80ef8c4920ada94f361ccaaf2c01ced1c574d177cb72ae9bf2b89c02a0ca96bdf4babb51aa510d079262a314d6fb1a5aae6661eb6a4addc8932e77cd8803400f03b7c16f19123a2dbfadd79b616da2900ec04e12d38716a3676df1ee213faf68f2822258b551727a3781beb9982374bb25bf1321245936dc1f2a349a59824d0db65c8f668f8dbf2ba7faa75daf33c4de7f07f20fec12ccb03bab0f8cf39ac2f0044d365b75654ffb33e889232daa808b22d2758b4c4ed316b7c876c3046ecdcaab650b3731f1a", @ANYRES64=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="64998f3ec1276256e66ea198150b065b3a674271eb8a3e113daa685e7f867b745859382bc9e048fafecb97d18b8187fe4b6dba877d20425076252c349dbe4245", @ANYPTR64, @ANYRES64=r2, @ANYRESDEC=r2, @ANYPTR, @ANYRESOCT], @ANYPTR, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESOCT=r2], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES32=r1], @ANYRESHEX=r1, @ANYBLOB="d5bb08ffcda8c8c8aa4915df01aa0e6f1d7924a873048737d8d028", @ANYBLOB="4890ae8168a06abeb898bb744debb41fb372c8668b3bc30da8940b8724a70147c333af9dfaab07303d6f7a9a19c83c681f1cc26b8c801d3eeed4b504cb20923772851d238501b86da6bdf1add6b3dcb10f8f8534a4be32dcc8fe9d8da39585af6548ba93498f0041e50d7cd62b2bd3d44d8c22f2197ee2359c4a75626ec4f9e8e5596916793913662b4ac4353c34d37ed4b656f80bb9899614d9a23f42d6cb1fbed4"], @ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRESHEX=r2], 0x42d) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in6=@ipv4={[], [], @local}, 0x4e23, 0x4, 0x4e23, 0x5, 0xa, 0xa0, 0x20, 0xfb, 0x0, r4}, {0xffffffffffffffe1, 0x1, 0xffffffffffff0000, 0x5, 0x322, 0x0, 0x3, 0xfffffffffffffffd}, {0x100, 0x1, 0x1ff}, 0xffff, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d5, 0xff}, 0x0, @in=@rand_addr=0x3f, 0x3500, 0x4, 0x1, 0x4, 0x0, 0x8000}}, 0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x14080, 0x0) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000005c0), &(0x7f00000006c0)=0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f0000000600)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000640)={[{0x7f, 0xffffffffffff0001, 0x1, 0x8768, 0x80000, 0x3, 0x0, 0x1, 0x7, 0x9, 0x80000000, 0xd7, 0x5}, {0xecf, 0x9, 0xaa67, 0x4, 0xffff, 0x3f, 0x4, 0x1ff, 0x0, 0x5, 0x0, 0x1, 0x9}, {0x60000000, 0x2, 0x9, 0xffff, 0x2, 0x39, 0x7fff, 0x7, 0x3f, 0x5, 0x401, 0xe89, 0x1966d5e8}], 0x1}) 05:12:00 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) get_thread_area(&(0x7f0000000540)={0x200, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1, 0x5, 0x3, 0x7, 0x20}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x63) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) r4 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4a0840) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000500)={0x3, 0x7, 0x10000, 0x4, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udplite\x00') ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000000)) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000180)=0xb874) 05:12:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000040e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xe000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:00 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x719281) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000000c0)={0xc5a, @remote}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1303.448529] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1303.470087] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:12:00 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000420005010000000000008dcd88027c2dfbb0b3695400000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x7ff, 0x64, 0xe16, 0x8, 0x7}) 05:12:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000048e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0)={0x7fff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x22c, 0xfa00, @id_tos={&(0x7f0000000140)=0xffff, r1, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 1303.603987] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1303.629559] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:12:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000004ce8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x10000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 1303.741363] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1303.759054] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:12:01 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @remote}}, 0xffffffffffff7fff, 0x40}, &(0x7f0000000140)=0x88) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:12:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000060e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x20000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fremovexattr(r0, &(0x7f0000000540)=@known='trusted.overlay.origin\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x17, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x100000a}}, 0x20) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x611, 0x2000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000380)={'nr0\x00', 0x9}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) connect$pptp(r2, &(0x7f0000000280)={0x18, 0x2, {0x0, @remote}}, 0x1e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, r2, 0x0, 0x12, &(0x7f00000004c0)='/dev/input/mouse#\x00'}, 0x30) tgkill(r4, r5, 0x3a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 05:12:01 executing program 4: r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803be419db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x40000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1304.397096] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1304.427237] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:12:01 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f00000000c0)={0x103, 0xa, 0x8000, 0x1, 0x8, 0x1000}) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bed21a08724e54e214000000420000000000000000000000000000001bc5cda5cc71231dfa47cdea99230051c1ee72962e7f6f229c7223d1615f82ec7199949b97eea4771dd2b98682da369e672a49f39d1ca941"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f0000000400)={0x1, {&(0x7f0000000100)=""/211, 0xffffffffffffff8d, 0x0, 0x2}}, 0x1a) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000500)={r1, r1, 0x1, 0x65, &(0x7f0000000480)="75be4c2c82945eeb77f4581f7ea4f88b96bc1f6d92a5984236d59b45b88c2f4032c52ad447ec1919e29c44324daede87051aebff5b5b58b6125b48018ac3e907576953750447ae3fe20a55cc82ae79e635404c80fe0e214abdbba75b5a4f1fea33ff9686b4", 0x7, 0x2, 0x1, 0x80, 0x40, 0x1, 0xc9, 'syz0\x00'}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:12:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200005865e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x48000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1304.602516] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:12:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000068e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x3, 0x4000) [ 1304.728126] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 05:12:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet(0x2, 0x4, 0x2) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:12:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000006ce8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r1}}, 0x282) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:12:02 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00887b66b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e03b1205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e027736fb32a803f0019db9f935c5b9f11acfcb0724696469bbaa3f3ea6aab9b7cf2cdb24526c200000000000000b1b6d76a6e68a25071a4b636b1493b06015959e2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x60000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:02 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000200)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x7, &(0x7f0000000380)=""/226) 05:12:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000074e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000680)={{0x5, 0x80, 0x3f, 0x7f, 0x3, 0x2}, 0x7f, 0x2, 0x100}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000640)={0x1, 0x0, 0x103, 0x4, {0x7, 0x2, 0x4, 0xfffffffeffffffff}}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000440)={r5, @in6={{0xa, 0x4e21, 0x80000001, @local, 0xfff}}, [0x4, 0x5, 0x2, 0x8df1, 0x7, 0x20, 0x1, 0x2, 0x43, 0x3, 0x4, 0x7, 0x4, 0xfffffffffffff744]}, &(0x7f0000000540)=0x100) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r6}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000005c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r1, r3}}, 0x18) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x19) 05:12:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x65580000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda06020000007ae8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x68000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1305.951055] net_ratelimit: 23 callbacks suppressed [ 1305.951064] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.961187] protocol 88fb is buggy, dev hsr_slave_1 [ 1305.966267] protocol 88fb is buggy, dev hsr_slave_0 [ 1305.971388] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.031034] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.036146] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.041064] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.046328] protocol 88fb is buggy, dev hsr_slave_1 [ 1306.051535] protocol 88fb is buggy, dev hsr_slave_0 [ 1306.056605] protocol 88fb is buggy, dev hsr_slave_1 05:12:03 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 05:12:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x7f, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:12:03 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) r1 = request_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0x2baa, 0x4, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000081e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:03 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff95, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1}}, 0x20000000) close(0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0), &(0x7f0000000180)=0xffffffffffffffbc) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c020000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:03 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x74911c3b, 0x301000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) pwrite64(r3, &(0x7f0000000440)="fbaf2a951ff8ff95cfea401a0750be8e998184b5dcd3e9996fc303bec7d26473f6e6b8bcbe18a5d54971c3d00f7ec347649bdc161f8a96925f5b992ae7d8f74489e7d2c51ea46f517e5a4f1fdb36b8a9a7d5b5a0fc110c1370b55504cfca6c8af710abebc109949ddfd57be0c6146ad24146ece569807049802ca62e1a419a19d0002c4b6aabd5d9174d1591206a9ab3e4087a0c8249620b0f057a24d4ab3b0cb0a8ad15ef90fe9f1d0e9b5d46fe60f212644b5e81", 0xb5, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:12:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602ffffa888e8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:03 executing program 5: socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400f7ff42000501000008000000000000000000"], 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) 05:12:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x74000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1306.502492] __nla_parse: 7 callbacks suppressed [ 1306.502502] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 05:12:03 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000440)={0x2, 0xfffffffffffffffd, 0x800, 0x7, 0x3f, 0xc}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 05:12:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) munlock(&(0x7f0000fef000/0x10000)=nil, 0x10000) close(r2) write$binfmt_misc(r1, &(0x7f0000001600)=ANY=[@ANYRES16=r1, @ANYBLOB="3c544d7e983f137f843f956650f44ece36a8ab8cbb72ce103f86b192e8592d7ab9188cd7cd9e1e5cecbeda5f2b9b8bae3ab81d7232fb359fc32f241dada8cad78b939c51765e1a375c8f8325caba5a71f6394f980880c77bb25d0965e52b04695303f3561d2e7454ed0140838dcccd642caacabaa894473f2523a764d41ac4defb975a66ae34de1908134b7a7bbc0f02904f9862aeef8cc69b66b1a3ad065dc0e427689b15cb31f051932a9744b5aca6cdacaf00f6d1416fe8736065feadc48a53de04a8ffd39905320314680da3cb2f999db727037e22fc5640ab65149e387382f86e273395dcef9003a65b14479258557d055a0c820d5c8498cc48ec79ae5a92a50ccdb1923be77cded1a236397efe105c6083b55a1ee534e4b0f369b951ca0b9aaf80bada7c2418fe11bd0da82e7156e5d3de7470874c746c5ad6d72c2246a6def4e81977af0349600cc5d4ad17c52f5860f340c021b9d387e9dac05c515bfcf93254bcf18ab78cf4e3c620f4785160404e424412c5bbe1c627e31f58b9cf1bbe0147bd15d79b52f0e85280443205d7b3348b9d568bed0e8b7f0eadd972480f667f63cf11a157913f8152b2b1ce60dcad8eec43872083daa4d2b6ae9a7643b742cc941916cb15a077b29b7878e002d5df5040f86b386cd6043ab03816e454364fe92c3dd6171ad475c3f4a35058da4f3eb25f25594ffaafa27b05caf73febdebd9f543c10a249db52da4ff35f53597ded438950b03603c5c094f5aab0e42440c1561e47deca7ae28926412d58c2a1ad06045cba69f67b572a7afc38a00216e5fa1dc915b5e7e36833f2b9865b9cb18bc9549cc93a155b1b94d476b229fe541a7dd7f932533fa6f868ed39cf0e2b8804a886eec68a02ca3d3e86cb1f4e6f3169ed181be1636fb279bb25527eaa06f38739303342f2b49bca760e96fa4a1cbd997405abeab88de87c92b04ac8084a69815ffe87e3968d53b59aa5667db61b2263d003ac1bb7db0d841b275f827cffa2ee81fc75286056f13848db86b63d56db9a2f46fe75d7854080217fb66c481975a4ceb1981bc99cb281851871fb00103c01b7d9c72b574aa08ed93abfbb779e0d988ebd96257e808bbc3bb7d8fcb7eaa7378196425ceab56807d929a29876df7dc1f8e95a9d69db21bb8eee3be066cc449a1c2e38f19758877ffd858e43cbf85794eb552a4c22126c7c347bdf3335b62e579897052f05219239ed360bb031280eb07b008d535138738ba85c56f321d93622b32841c943af1bc94efb93744ebfc5163dcc8d8b68afe31fd492fd7ea1f1add27c214aabf2f5fdfcd63be34312104c16fa67456b0c71616f666d70a619644762b4b4ba796e4d19479960c65bf6077c62b11348bfe172bcd3acfe47b73b4b1a61efc8ba8a00fba8e2219b5bcbe8422e8fcebbe45400c493cc002f2d8fde9028db233280a9bc212df203d8cb22ca61ede990a31d4f4bda25456190e85a31bb55506422d7acf19321036fd73051dcbac08787c28ead95568b6d418961b87dcb15ccab242630b484af967f83928b38401b824d7b549141920829fa03508583b6d714333f923bee6ceebf57836e3f878e331b9a21e7b56509e652cee2e1bb945668d00799486b1ecc1bfcb2ea89afb5c3873d260fe3aac0bf0646434b34337665a5c03406e242734c1717128e18581b537c762618eb85c14d1192d14dee0c41662bc9eef49a98aab26ac95da03c7fd1a168f0e8a27a457b388b57cd648014ca28716a7bcdf4ab2e93ec78f8fe7df2be2fd25392230bac3f9bc61ff0b796a6e8a5dca2947aa69ce2e841257c4af735da471188d9aa15173610d6c8976955813eecc4bded3cbed42b585f416dc0126459d4aad64cd94b3702e2cb69def68d6da8b854f0ce85376633d6d6acecf8f5aad1f26fe47e433ff0cd660535aff07f939c7442d25c15a6abdce220e263babec823904e65d2c96510bb7a282a772f7f25292ec5b5b1dc7ed26ace10c07b707b589b121861b96236b1473f87a9ebedcaef7bf95ea36c5e007a02473e04cbd18f002bcdf990165f520555e0c94b92f1c14d0f4aaa150e2b47f0a65387fec9ddfe20355017a6ca7b48ebd01e3e1326b4935e5808c41b19296bbef49701d95360d8cfd4903fae3708595d5a12b3c00af57d1ee36c014f75dccffda23d989d5bd3fba9b734bcd60ad9e5b20e4358a792edf0119a22aac63c942384644f586f295dc54c89bb4f76d035fb9f47e72c0b40b4784eaf73359a9f07644b33abc4ed053ac176b0d64823abb2da382ac6a2d6dc1987d43bface9316feecfc11fb58080d7a1349f4895ed3767964f186012781724c14f08379e0b388a97657a3dc7d9801a7815ce0eab64c78408a1328f63b5249dd29f824b1dfc385e093ea35f6d6062d7d780230967bab1ec0f0410c0a7139071c5712b603e22dd0a89a4171439f20ce013048dc42664437f6e1adfa8da655e1ab9992769d201f4012e766b8eb1bf0fdaf634821df46ea2bfcd42c7efbdd452588944f34795173b5194bcda97129c54e234e987160e328686162914bb3cf69ea4ae03d10e2feaacba4728f65780db547cf6cc2b303129368b6d99fbdefa725d4a9729074fb25cb43c5e029333360250abda6377e82c7c7bdaab4a3e7facbb5a59ce1a91b8d79dd9d524ebc216bec1f21d44f621c4d82a83e2c15220ce8c3f07263fc5136b9474b0f354e8f4ae642944285b16dc42d4f2d8dd4e178396f465c8e8f15291534da84d2b0a6bde9ffa3284a3f88fbeb93955d06c5d061513b2c85f7ac1015777369d7c0c56ccc232decd4f3c5e47aa20568b4f636b955bc9a6d16504e275a77a1f81821b5c84c7b0a4d21c65c0334a58effd98177c42ea63f9506ddc79fdf417f82b2492b77d673bdffa816b488c01c2e0a67d2081ea0ad72bdbcb70f715de31c75f154b05208e5d2b29946e86a158e2788c825139043aea38b3369db2ec5cb771f2bbcd475cd36bfc9fb86ad794621b3a95cd39d223b3ce7f36b1b87dc89a380d23da48da856e080972689a04598ddd76483b682045c0079137f0c12e5ea84c613be3c62b07a726458ed4e38af850c862f18810ad5957776f28348bbd361e1fac7ee34f11f1524fe5c4c964f05c6005d578636ade8d1848bd67f41d213c3f6ba27ac5cf3c1e25ca94439ff0af6049fd546df5125b6f2ce4baf5f2108b667f383b8f15e6c8d5d3239326fbed1ab07442dee7059abc9f142b65d97fff05527e6845184b91561fa257d46c38456c9d075bd2aa1733a6d84e1e4f607c56dc63fc3fe5bdb106d498fe34c928cbde8584da04960ace7355d4c968b289344df7be1b3ae47c8db0d7a482ec99388e3cd244fa511624a279101f3c91304ee841bfcaec072275f751e6acbad65ac418e6a204eea86a83a9e061ef40ab0e9827169de557adb822f2729126ad40d2e5b4f79d598ed96597b7515016e6a1a8a2d96c0c82380325173dd623408c8d79cfc40eff251e4a9c18599e895070fefb401e877f92153793af5d8846a093d70aaf75391342f10786265d87116cecb209ab79cfb5c2dbee62156159fb400d811dff2e4d2757a9543b045c540e5c7cc7996c0fed3fbc03b1fb2c120ff69b2f0e5dea8d687eb41bb7ce158498a76b33551023d6f946b4144df95eb66df0791b1ceb9eacda9e869442cb35211c9c205295062e3dae542cfef98618162b081d857e4adeff04814216fb288c83f9f3b2187c4cf715082ac66cf28c4ab769e6874b1c9bc1aa20cdb19dccadafa6794be173e6a22635100c7036a5f77fceaf10f03c7bd492f6adb7e6c7d02a4a743b76cc10e604198367d3fa00f0cc21650ebe3382d331611db1006ead72a8e2510ff9d70efbc42b7841d7995d1b6e76613423f7687a6163da22d0fd7f9b8fcf178dde06a8351f0b709397bb8f623379fc789ec8933240de8ef4b8169b3edfea361ea342b77cb9428adb73457755d32e437e5550ac629c52c10049afb1e93a5e86f09d1ed3ec765207aea4ae1fbe3283e4b0b6dd35c7a8a024866990a178bbfe7101dd1d5dc612ddaf28311dcecfd1d11be9f26f53f5cc020b485ec87fdde09bb2d2ba1c48fb47bacdf4570faa5c13642dda199609ece8753c719532223fac937e6e4224959a7d08188694c9e1738a5ea67b024a263d1f6df4ba94d684dcb0c5f31473da68fef508e0fe6bc311bc4cb80b5be009b8aa2e924655bcce4b27157e9a751dfad4c32219a2cd8bec75cff8904447acb4bd69cfdd121a46c631c7af1856d31364a26712887a681828ab37be7241a8a47b578b2ac3f31ded2694f4f9fadb5c9f756a3be51a4a8b86f029b0560dc0596f3fd0314c7d518a009180136e2cccdcced65fa7b2bada40a25ee7459887d6dd9130e5ee9beb8b2ae1a5b5a5e4801af62d939f4f63127fea49457f139e1d486c51daae7bc5412ad68fea71f9c43e251a467f36fd51dbef4af4628a6af9f2aba96de91a96e5c5134ca862c77871a80cd5454cfb2a10cf7e8335b9702b9e53016ed75d41812929d2b70d291caca8ab7b42ab64df3c6b4d1c58e793d00af4c6e0fb320948a3cde40d623072ce4a48c0b1ff0df885f5a1339a612c19c0c761dcd880fc69076084dc4a708f19a9137f9f19803910ab5f8004fd1e9a8d6c39476dc777d35fd0770a1936325eeff8d58232bdc864c5516b94ae3bc707fe2751165f09999012589bacf2db4afa2472d2a2a70dca307e3b946cc4cf39136dbcfe89df60f0d42740b10b8cedbb4e21ea6714b005b4e4496604ea1c8f22e67107e92fe108a9beb0d5d01df2172800e4845f0dc42bfbbf195757be502cae1bf730452817ac7a7ae2d1d34022ec28eab65bc4c980f338c841d580f8fd63b7fac820f9fc5668b3a27b1493ca3545e823e7222c1a0f64de7c3523646ed84203d4dbe8fe8dc4957db20f6aab3e76957b216771b0a6a799ab177b04905e9be86471eadee1be66aadb9517e56e7aedb53fa34e496d6ad03b1ab591f38468ad52df4a609d2372161a2bca5f5dbacd84cf81f51f5a1d0f4a824b423c5ed58ffb07a205709c459d8d8e9dc21d6f7ffddb03e89543154ccfb0c4278464d57ab54fc057276ff46b72e6eeba7efdd7fb718eef05ff45255c16e0a28455868e634975f4f5e3e959a8e95668ba203bd480c8dd2a6c497b75f1e40b3d982f28fcbafa687d9e282a94da5cce2d8b2b8f4a93d51fda2d3fac0aae71f4f46b40ca8a848e2a738e87d20bf45ca05e8469be30717c7418555da07e058a075c865731ba87a63a2f9f2da2fab049626bb6b92aa0e8a589bec1fe46c5bd2ca2eedbecf8fccc772dc199ddbbd26bb3425107842211ea5571d890d739535089bb3bf0289031f62df960eae91369d7c06c3f127807132cae4b646008571d45cefd68c590a98bc907e9eda725c52a4ee3e035b4449ae02cc99d6d4824c3bad5064f8c9c96481300b3884c2ff2561a7719a841c0809bd56a470fb04f70d083640a8c7717db1a5d67f06e9d79936b8e6cb9de5885e4360d987c8fb843e5dcbedbeb972edd7f8197692ef4a4325a60cc9c50ed94ddba77c499bdc5b377c2aafd47816a886df95723b7589448ed8aecaa947dd2e5d882917b96117bd5b1a0723910a4625532ddcfb31a8dfba6fed66599adf682b11b372d01d879bd622073b1f20884655e2ac010825f48c237dac92e9bfdc4c92d59cececc3cef5356ac4039709bfca67b194969b30ae7c929d358f8335fa6e27eee6b4d240c2b63e194c20b4f83d7254abb479b7b81f4f04f393be1459b0a6", @ANYRES64, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESHEX=r0], 0x103a) socket$inet(0x2, 0x7, 0x8e) ioctl$TUNSETLINK(r1, 0x400454cd, 0x312) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$P9_RSETATTR(r1, &(0x7f0000000280)={0x7, 0x1b, 0x2}, 0x7) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@req={0x20, &(0x7f00000002c0)={'veth1\x00', @ifru_map={0x10000, 0x1, 0x80, 0x3, 0x2, 0x9}}}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4040004}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22475cac}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffbb67}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000810}, 0x24004880) r5 = fcntl$getown(r1, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000380)={{0x9, 0xbc2e7b25f1dcc170, 0x7, 0x800, '\x00', 0x10000}, 0x4, 0x8, 0x35e0, r5, 0x5, 0x8000, 'syz1\x00', &(0x7f0000000340)=['veth1\x00', 'veth1\x00', 'TIPCv2\x00', 'TIPCv2\x00', 'TIPCv2\x00'], 0x21, [], [0x10001, 0x100000000, 0x0, 0x7fff]}) 05:12:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602ffffff9ee8000104001400ea110000000500000000000000", 0x29}], 0x1) 05:12:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffdca) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8aa, @remote, 0x3ff}, {0xa, 0x4e24, 0x5, @empty, 0x80}, r1, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x4, r1, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @loopback, 0x3}}}, 0xa0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 05:12:04 executing program 4: socket$tipc(0x1e, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501004600f3ffffffffffffff00880066b8a65cfc5e9ea5a1bf909e967195b74f26aeb9f58a9d672eb476298e8e189d205163735a208261f638cfb884b47d93ecde36b2b8d0f62c08e0db9f935c169f11acfcb0724696469bbaa3f3ea6aab9b7cf206000000d60fcdc7590c12bcb1b6d76a6e68a25071a4b636b1493b06015959a2a3c80c4ba8be165e8d01923a163ffc7032"], 0x1}}, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x9}, 0xf) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0xce25, 0x1, 0x2, 0xfffffffffffffffd, 0x8, 0x47c, 0xfffffffffffffffe, 0x100]}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) [ 1307.274031] validate_nla: 8 callbacks suppressed [ 1307.274041] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1307.302774] kasan: CONFIG_KASAN_INLINE enabled [ 1307.303366] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1307.313815] kasan: GPF could be caused by NULL-ptr deref or user memory access 05:12:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200001ddbe8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1307.323126] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1307.346908] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1307.353173] CPU: 0 PID: 26123 Comm: syz-executor.2 Not tainted 5.0.0-rc5+ #66 [ 1307.360446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1307.369816] RIP: 0010:rdma_listen+0x2df/0x8e0 05:12:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x81000000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1307.373550] kobject: 'loop1' (000000000e80faae): kobject_uevent_env [ 1307.374315] Code: 8b ac 24 c8 01 00 00 31 f6 48 c7 c7 00 43 1c 89 e8 36 48 fb 01 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5a 05 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b [ 1307.374325] RSP: 0018:ffff8880928ffb00 EFLAGS: 00010202 [ 1307.382297] kobject: 'loop1' (000000000e80faae): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1307.399653] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 1307.399663] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000008 [ 1307.399673] RBP: ffff8880928ffb38 R08: 1ffffffff1238860 R09: fffffbfff1238861 [ 1307.399697] R10: ffff8880928ffaf0 R11: ffffffff891c4307 R12: ffff888059bfad80 [ 1307.399706] R13: 0000000000000000 R14: 0000000000000400 R15: 0000000000000007 [ 1307.399720] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5d4ab40 [ 1307.434402] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1307.436287] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 05:12:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x88a8ffff, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1307.436298] CR2: 000000002d724000 CR3: 0000000085b19000 CR4: 00000000001426f0 [ 1307.436312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1307.436324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1307.452517] kobject: 'loop3' (000000008a41f655): kobject_uevent_env [ 1307.459066] Call Trace: [ 1307.459093] ucma_listen+0x14d/0x1c0 [ 1307.459110] ? ucma_notify+0x190/0x190 [ 1307.467930] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1307.472436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 05:12:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602fffffff0e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1307.472454] ? _copy_from_user+0xdd/0x150 [ 1307.472473] ucma_write+0x2da/0x3c0 [ 1307.472489] ? ucma_notify+0x190/0x190 [ 1307.472505] ? ucma_open+0x290/0x290 [ 1307.503194] kobject: 'loop3' (000000008a41f655): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1307.503259] ? __fget+0x340/0x540 [ 1307.548326] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1307.549717] __vfs_write+0x116/0x8e0 [ 1307.549734] ? lock_downgrade+0x810/0x810 [ 1307.549751] ? ucma_open+0x290/0x290 [ 1307.572186] ? kernel_read+0x120/0x120 [ 1307.573925] kobject: 'loop1' (000000000e80faae): kobject_uevent_env [ 1307.576081] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1307.576098] ? common_file_perm+0x1d6/0x6f0 [ 1307.576118] ? apparmor_file_permission+0x25/0x30 [ 1307.588661] kobject: 'loop1' (000000000e80faae): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1307.591744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1307.591762] ? security_file_permission+0x94/0x320 [ 1307.591785] ? rw_verify_area+0x118/0x360 [ 1307.611272] kobject: 'loop3' (000000008a41f655): kobject_uevent_env [ 1307.611667] vfs_write+0x20c/0x580 [ 1307.616604] kobject: 'loop3' (000000008a41f655): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1307.620731] ksys_write+0xea/0x1f0 [ 1307.643610] ? __ia32_sys_read+0xb0/0xb0 [ 1307.644122] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1307.647691] ? do_fast_syscall_32+0xd1/0xc98 [ 1307.647708] ? entry_SYSENTER_compat+0x70/0x7f [ 1307.647725] ? do_fast_syscall_32+0xd1/0xc98 [ 1307.669669] __ia32_sys_write+0x71/0xb0 [ 1307.673682] do_fast_syscall_32+0x281/0xc98 [ 1307.678024] entry_SYSENTER_compat+0x70/0x7f [ 1307.682434] RIP: 0023:0xf7f6f869 [ 1307.685807] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1307.691157] kobject: 'loop1' (000000000e80faae): kobject_uevent_env [ 1307.704712] RSP: 002b:00000000f5d4a0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1307.704728] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200001c0 [ 1307.704737] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1307.704750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1307.724682] kobject: 'loop1' (000000000e80faae): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1307.726127] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1307.726137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1307.726155] Modules linked in: [ 1307.770432] ---[ end trace 332fa2fae4518a4e ]--- 05:12:05 executing program 5: r0 = socket$tipc(0x1e, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xba) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x400040000000042, 0x105}, 0x14}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xd3, 0x0}}, 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x44000, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x1, 0x0) tee(r2, r2, 0x1, 0x1) 05:12:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x9effffff, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) 05:12:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda0602000002f2e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1307.784266] RIP: 0010:rdma_listen+0x2df/0x8e0 [ 1307.789190] kobject: 'loop5' (0000000055692492): kobject_uevent_env [ 1307.809251] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1307.810568] Code: 8b ac 24 c8 01 00 00 31 f6 48 c7 c7 00 43 1c 89 e8 36 48 fb 01 48 b8 00 00 00 00 00 fc ff df 49 8d 7d 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5a 05 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b [ 1307.837587] kobject: 'loop5' (0000000055692492): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1307.838898] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1307.872462] kobject: 'loop1' (000000000e80faae): kobject_uevent_env 05:12:05 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x255) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r4, 0x1, 0x6, @random="f6776d3cd1de"}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x400) 05:12:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200007ff5e8000104001400ea110000000500000000000000", 0x29}], 0x1) [ 1307.878961] kobject: 'loop1' (000000000e80faae): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1307.891864] RSP: 0018:ffff8880928ffb00 EFLAGS: 00010202 [ 1307.907553] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 1307.914632] kobject: 'loop0' (000000000493143b): kobject_uevent_env 05:12:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xb5150000, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x2a8}}, 0x0) [ 1307.927577] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1307.944189] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000008 [ 1307.944479] kobject: 'loop0' (000000000493143b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1307.963469] RBP: ffff8880928ffb38 R08: 1ffffffff1238860 R09: fffffbfff1238861 [ 1307.977810] R10: ffff8880928ffaf0 R11: ffffffff891c4307 R12: ffff888059bfad80 [ 1307.988826] R13: 0000000000000000 R14: 0000000000000400 R15: 0000000000000007 [ 1308.009582] kobject: 'loop3' (000000008a41f655): kobject_uevent_env [ 1308.012404] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5d4ab40 [ 1308.023460] kobject: 'loop3' (000000008a41f655): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1308.035773] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1308.051578] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1308.054746] kobject: 'loop5' (0000000055692492): kobject_uevent_env [ 1308.057592] CR2: 00000000081220f0 CR3: 0000000085b19000 CR4: 00000000001426f0 [ 1308.076268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1308.083683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1308.083903] kobject: 'loop5' (0000000055692492): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1308.095611] Kernel panic - not syncing: Fatal exception [ 1308.107056] Kernel Offset: disabled [ 1308.110682] Rebooting in 86400 seconds..