8ef090e2583954db68be7cc737348dc8080fe2cacc2182bd226feac08e8e018c4698279ab5f19e30555ac3d97c513565a99b5b6a2f6a99483ff4cd421696e9820df314cb165d3270e393109b020efba4404f3e28dbb49933f881b9094c5bb1eaf5020275ee8d7160d07d39967b866ebcd365258c7db38bc0466be3444360af10801d37d5b9113464f90a47656b7dba5203b00c1c736cbebae51a97a25d6235963e761273007443afe9248692d67d1c87337dbe391091532ba24db7fa53c84b1f31f5803fd3c396be065cf4edfd5cbe562870d566ff8e0", @ANYRES32=r3, @ANYRESDEC], 0x5}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000100)={0x557, 0x20, 0x2, 0x5, 0x6, 0x3, 0x48b6}, 0xc) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000000c0)={0x81, @multicast}) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000000)={0x55, 0x8, 0x7, {0x1, 0x6}, {0xff00, 0x1000}, @const={0x7, {0x0, 0x101, 0x4, 0xffc1}}}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 13:45:30 executing program 4: r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) connect$vsock_stream(r2, &(0x7f0000001a40)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r3 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9b0000, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x980929, 0xf968, [], @value64}}) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000300)=0x80000001) read(r3, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc05c5340, &(0x7f0000000000)) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:30 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x100) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8087482a5434a2e419da86521f1c9db124e2fc1d6bc61953e1c0a72be4c56b54881606c61a8b96ce4c5f219a749996b7c15008760fa54d31e8c2c8871a724dabe19c026d5bcf774d406f4ee290b92cec62b5f3aa1bb93f28b94c9d8d", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9e62fcfc6000000400d900000000007f0082594122ab3ba8d02bf5ca03b49c930dc2c6596493f1c95ae5a44bcc8917fd8064bd0cbed6b2ec031c55c74ee07903d5fc84f34cc6e33a08a504ee37e786105e4c3d6bea265beae8be8875851fa33c65e6122c6f301ca7673bbab39f9f9503a77aaeeb3ad23af63ebcce694ecca7960f9af81fc2d79df09c3671bf1755be1c0b00fa4bf11d6409157a0f32cf3310b6636f5ab2a019"], 0x1c}}, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) 13:45:30 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') pipe(&(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) [ 2152.808962] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:31 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc05c5340, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) tkill(r0, 0x1000000000015) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@local}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c0}, 0x880) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000700), 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[]}, 0x1, 0x0, 0x0, 0x6}, 0x4000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20300000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x3e8, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PROBE_RESP={0x3cc, 0x91, "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"}]}, 0x3e8}}, 0x8080) [ 2153.424644] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0x0}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:31 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:31 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x228040, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[]}}, 0x0) 13:45:31 executing program 4: r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc05c5340, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = dup(r3) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0x4, 0x3001, 0x4, 0x7f, 0x82, 0x0, 0x20, 0x2, 0x7f, 0x40, 0x20, 0x8}, {0x4000, 0x2, 0x8, 0x5, 0x2, 0x2, 0x0, 0x4f, 0x9, 0x8, 0x1a, 0x3}, {0xf000, 0x4000, 0x0, 0x8, 0xfd, 0x2, 0xd1, 0x5, 0x6, 0xff, 0x6, 0x7f}, {0x0, 0x5000, 0x1b, 0xb9, 0xfb, 0xc1, 0x2, 0x1, 0x80, 0x7, 0x5, 0x7}, {0x2, 0x2000, 0x9, 0x3, 0x7, 0x0, 0x3, 0xed, 0x7, 0x3, 0x92, 0x7}, {0x0, 0xd000, 0x0, 0x9, 0x6, 0x7f, 0x8, 0xe5, 0x1f, 0xff, 0x4, 0x9f}, {0xd000, 0x6000, 0xe, 0x20, 0x0, 0x8, 0x7, 0xca, 0x9, 0x81, 0x2, 0x2}, {0x3000, 0x100000, 0x19, 0x0, 0x0, 0x4, 0x1, 0x7, 0x9, 0x81, 0x86, 0x1}, {0x10000, 0x10000}, {0x10000, 0x2000}, 0x40000, 0x0, 0x2, 0x100000, 0x8, 0xcc00, 0x2000, [0x8, 0x5, 0x5, 0x4]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bbf9, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2153.961338] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:32 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc05c5340, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x10001, @ipv4={[], [], @remote}}}, 0x2353, 0xffff, 0x8, 0x5}, &(0x7f0000000180)=0x98) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000140)={0x3, 0x90, 0x46}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:32 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05028000001a67b01f2ddd5e9dafcf6e0fb7", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bbfa, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:32 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc05c5340, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:32 executing program 0: r0 = socket$inet6(0x10, 0x5, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="de30f78693c8e65a46b66d3081913a0290d2a81162714472f417c95b0c7cd7fa6b9077c817b286dd34c6a4a02c8f38e011b8e16fa529143eb370af05f9dec18d2d5021adcecb35311213f75a5fd313ebdcb218d911f68dac5433772cb7f68c805d9f26fb3ce337a320fa78124538ee8b3b2a2b30a8b43373b0258f69779f99e678690808abbb11ad2a71e001f9d884343ed7c4934f9076b42f15364e5d93f6db948fb2127db4723196ffc317f6149f22ade969204b7349c4847391aaa016b6305bc554b0d071493ec793c7bf", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:32 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2154.702077] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xe0}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:33 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc05c5340, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r3, 0x0, 0xd, &(0x7f00000000c0)='/dev/snd/seq\x00', 0xffffffffffffffff}, 0x30) 13:45:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x12, 0x6, 0x147, &(0x7f0000000440)}) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000040)=0x8) 13:45:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bbfb, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:33 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2155.447678] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:33 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00') write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x2d, 0x4, 0x0, {0x3, 0x5, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/user\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000280)={0xa7, 0x5, "9f41cad83bff17c325aeb0ecfd26f4e177e1c313fdc2086a8d6e5e66320695084dbcd59a9c1d032c82bd2d514b2fdd1c5066571279c82487255ab11bd6f0cf0f57430490c837424ae4b4c5623886678fe088da33d689e838dbd477c904352fcff4177b79523070ba6838393d47aeb3e4ddc64faa851834ed5c9461a902b5aa5e4bdfc842ed09aeb8f91222b9569e4e931cf6add0455ec4d2b97d8b3abd7a1f"}, 0x101300) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000000c0)={0x4, 0x9, 0x401, r0, 0x0, &(0x7f0000000080)={0x9909dd, 0xd6, [], @p_u32=&(0x7f0000000040)=0x2}}) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000100)=@netrom) 13:45:33 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc05c5340, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x20341, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fcntl$getflags(r4, 0x408) fgetxattr(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7460f4da833b5c8dbcf2362d7275737465642e2f6465762f736e642f73657100"], &(0x7f0000000280)=""/54, 0x36) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) 13:45:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bbfc, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:33 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = semget(0x1, 0x4, 0x202) semctl$SEM_STAT_ANY(r5, 0x0, 0x14, &(0x7f0000000200)=""/127) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="74268568395277d53d03fe", @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYRESDEC, @ANYPTR, @ANYRES32=r3, @ANYRES16=r6, @ANYRESDEC, @ANYPTR64], @ANYBLOB="066067032fb03c8eb0127eeb8d427558e99bd6153e1a29956adc591150347267ef98f04e829e91", @ANYBLOB="1ad709b8ac7868379276aaf03d12f50a68127ef9c18248be9100751826d6428c918bc69d40a516d1156deb97623a46ebe67680862ef41f3b26f15980328188493a978dfc78942a4128e13bba13a4f6e7fc6212f8aee7859c172ec286d4a218b45ecc04787dd36f857029d462b710a4116a5fc56aeb6a11d82b0d65e7a3cff09cb55464977d182b268c079258977d148d159462f5042531262118ec35d0babe7c74a5b88cfa37974905ab347b21e1e57a3dfca9e64001787e56500596b5439d38638087d32b6226e75e2bed47b3538446bfd753bf76f673fda552be894079fa1783cccc4957a8a4e359198f2bf1865f98b2f15a8232f062d8", @ANYRES32], @ANYRES32=r6], 0x8}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000140)={0x5, 0xc3}) 13:45:33 executing program 4 (fault-call:4 fault-nth:0): r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:34 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2156.180406] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:35 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc4e}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044094}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="2a1ea8b6b7"], 0x1c}}, 0x0) 13:45:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bbfd, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:35 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x3}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:35 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x4040) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000380)="e4c15dfbf0f873ba3ecb9d511c767580ab4330dc62b36782eb8ff135ab2a59a5dd5f758918efd2337a346399f94b0f8fa3a701aade846c81912ad7d4def8063ca7bdade94c6a6868fb56708be91528a79d8be16be110067378feeeab43f98578db8d38448353d868b49956", 0x6b}, {&(0x7f0000000180)="a61a16d6fddacb5a8fcff801859eb630d1d97a59af7e1e41071ac77f9c37b0040314f4c4e445353eeb2e5649359ef1aaa4adfc4a308778a3", 0x38}], 0x2) open_by_handle_at(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="280000003f000000b8a6b600ae3a6c018e82ca7d7e0a2895dfdab6cd84d0e3d05bf8cbc13842d6a8b5d4d30d62173ac73948f40524a597f1ebd5fe4558d674133aaa0dd6fa3ebbd30bf8e6e18f430ca99056215643af5a9b5922d75ea5ff86408a61fa7053c32745a2207372d36d5339a099d7f345e7ff503006929b7d539a3a529f4092758cf7e26d23c166c111c1243a49fe7764b2e1fde9d4c6fd5c7ac1b7963d9c5e4375ae45b3df9535ba240600e2fffffffffffae47af954ac62c96fd1625d6c8c6c6a376606a930ea5784eaa5b78e05815a44685c69f6"], 0x309000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) tkill(r0, 0x1000000000015) 13:45:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:35 executing program 4: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'ip6_vti0\x00', 0x6}) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x428000, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000280)=""/244) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) [ 2157.136846] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:35 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) r5 = getuid() r6 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000340), 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x200814, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan1\\'}}, {@cache_fscache='cache=fscache'}, {@loose='loose'}, {@cachetag={'cachetag', 0x3d, ')keyring@%'}}], [{@obj_user={'obj_user', 0x3d, 'batadv0\x00'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, 'noextend'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x4000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname', 0x3d, 'vboxnet0^'}}, {@noextend='noextend'}, {@mmap='mmap'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x36, 0xdfff31cbfefa7e3d, 0x30, 0x64, 0x32, 0x32, 0x39], 0x2d, [0x0, 0x31, 0x34, 0x33], 0x2d, [0x37, 0x37, 0x37, 0x39], 0x2d, [0x63, 0x56, 0x38, 0x31], 0x2d, [0x64, 0x30, 0x37, 0x30, 0x65, 0x35, 0x39, 0x31]}}}, {@smackfsdef={'smackfsdef', 0x3d, 'batadv0\x00'}}, {@fowner_lt={'fowner<', r5}}, {@dont_measure='dont_measure'}]}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bbfe, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:35 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fgetxattr(r4, &(0x7f00000000c0)=@random={'system.', 'systemvmnet1\x00'}, &(0x7f0000000140)=""/113, 0x71) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:35 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000140)) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") read(r2, &(0x7f00000000c0)=""/9, 0xffffffffffffffb3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:35 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = accept(0xffffffffffffffff, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f958f"], 0x1c}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x1}, 0x8) [ 2157.804951] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:35 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f0000000600)={0x0, &(0x7f00000005c0)=[&(0x7f0000000280)="13ef1c07a0dec7af6f6fc313db47a72695b96bcc55a7aed30e583d103b3b752c59fbb404b7732b333ecd56fc27b8709ccc6b0598d2c6c4b50b9b6cb665932a010b02eb63dc8b914def0a043179cf338381c7adc4f14b323bee6704e8639bf9dc7aac73f602b6c2436351b59530bf5a7fed4cfb783e612dc247dcfe3e91eac13a2826af7819175496b31b6057a2b2962373dead", &(0x7f0000000340)="da2132cf9ec300a833ec384ab66727a253e93c599be56689e8db5729bec4e2adbfd9d6eb18f2b357a839339813d13511b76f9c6e9b96b4ef8cd7fa02ec3a9b2f0462d355ab8eb5c8a18dea41321747865d3f3808cf4381eabb8015049b853f7fe0ede03809594371adb0cfca71906403598ad1c847879fcbb860bc6f875568ff01157e6b46f17e6f5a00cf1720eb6a7c6b769248a1ad99bd896ef6c9", &(0x7f0000000140)="305d5e5a7d58e11a", &(0x7f0000000180)="7c3e378dc93d6ccde2cd74f3913a2b08a7385d183cf9947afd966cdfe7afcfeeb97df3b40eacde43665fdfe4", &(0x7f0000000400)="bb9bcc85e3fc9669d39967e6aa5c58f7f36c394a9ac4fbfd64eb00c7a87d8a4ed8816a68d8e8b7e62fbc75909e1887e1c142c7863575906dff76722e629d4426d4196734d043c5230ce5a05db4a1c7c71b", &(0x7f0000000480)='1', &(0x7f00000004c0)="07e70989a6370f5f3bea7e01e0de89f3be0183adc2a1910f41118e9c31b097e372d5324dea792d01aba0ab447de219e4fc7ae20d460e7db8ce2c5fa761d4eca56083b8b64b2a27dab6133b90ace588a3f6c85eb1390760958ca00dd91e6a8a63f114619049a7546b7690c386850c476f8bb7408534f6fd1e6cca69a1c533236da9d3d5cf039db4bba204d299a245376806ac33943e7f4ccd3ef8c33ffef703a903e9c1aa48278fd665a72549485bbc80ec9ba4701a201db9aab74fd03d5727caa7a0ef640d63ccf4c45e71d21c6089b108ff58b72c3ba7"]}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:36 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bbff, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2158.346758] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x4}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:37 executing program 0: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x7, 0x5, 0x4, 0x10, 0x1, {0x77359400}, {0x1, 0x68ec1d0b88cfd59a, 0x5, 0x2, 0x7f, 0x5, "98ca51d7"}, 0xd58, 0x4, @offset=0x9, 0x41a, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) getpeername$netrom(r3, &(0x7f0000000040)={{0x3, @netrom}, [@netrom, @null, @remote, @null, @netrom, @null, @null, @netrom]}, &(0x7f00000000c0)=0x48) 13:45:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:37 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x1}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0x5, 0x9, 0x1, 0xcccccccc}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000140)={[{0x1000, 0x0, 0x7, 0x1, 0xed, 0x2, 0xf5, 0x2, 0x0, 0x7f, 0x0, 0x81, 0x40}, {0xfffffffb, 0x751a, 0x0, 0x2, 0x6, 0x80, 0x5, 0x2, 0x34, 0x0, 0x8, 0x1, 0xb18c}, {0xb66, 0x20, 0xb3, 0x7, 0x1f, 0x1, 0xb9, 0xff, 0x2, 0x1, 0x1f, 0x1, 0xfffffffffffffff8}], 0x5}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc00, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:37 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2159.147103] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc01, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:37 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r2, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:37 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x50b001) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f00000003c0)="ba35a2daf932bcbf49f8562ffcd272987ead4ce5228b63d1b8bc0adce9ca30851ba529f5a45f538de51b366e8b3a0c172f68988986a3a3188ea2c350233103eed61a1ca9324bfee8ec052332699970518d21d6e3e3ced4fe37b0c3f84b816ee25b654172afc95d54ff70a25e04a27871d5c46814fd1fdaba4cbb91e6eb41d0d13fa5762b92b3afde9ede55b6ff6bd7ec51fc7d26e1d049b1629f61cc55820c1c5330d90c62e6d94077c06227a660558912064f945e167912f44efec4a8ec7a4d08f1b62407681143f476f5266e9364fba57893045d7526d82421af85f394342e5d438744f0311bfffbbdbd2ac79fd7489a976abdb4f6ac", &(0x7f0000000340)="6959eb0bd8f7d9f1f935d60208978c4dcf19b2782ba67739c954b9116a03271ed55d9c1cb623558ad531074e93784970c46b6c2d30149199971447b1fade3c2d5f4f85c83f7ae0ecf0b80bbc6e0493ba4fae3cc0edb5121ca3b02d4a0c"}}, &(0x7f00000004c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r2, r1, 0x0) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x80000000000000, 0x1, 0x0, r1, 0x0, 0x2}]) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) io_cancel(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f00000000c0)="7002d68f7abe3025ee8399d24531e895bbf61e5ae3a7fdc7e2", 0x19, 0x56e, 0x0, 0x0, r4}, &(0x7f0000000180)) mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x1000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000140), &(0x7f00000001c0)=0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) 13:45:37 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0502800000000f6208c6b1cf8de7ea3d03cf000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:37 executing program 0: r0 = socket$inet6(0x10, 0x800, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x5, 0x101000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000000)="a5c7d0416ef09ca179ab", &(0x7f0000000040), &(0x7f0000000080)="bdb665d47eda626b3a342a94a0efe4dcd9c1d4bc4db63a041ef6cfb1849c42b3017e53b460f708c7ee10a0af70aed483135568749794fb309745d20fa2edab7da28b063e322a6760ac98860998b5bf5f404f327715443ad6e4b1ab49c848560ab5a656305aa51da1ab8e9a5ea9bab5b60cd73615027fbd2d7d4786a9856de1977cd5d4cf871c321125aefe9998a2edba6067236a20dd4e763144c5a69fb1122bfbeb5673480148b7744eee987ab65f7834b4b686035dae54daa0692447d0d4615bb152512710ea183d54af6e095f1e92849cb3f066f9dfb8369aeebe841630b6b99e0018f48fb72799087b543a0a52a5557b4c8a7cb9b857ba", &(0x7f0000000280)="9208e36afba94629a34d73c93e02d8698df95bd268c574548eb17711c31efa29c8f3588b1fe37e68b2512ae7a68a17e33c37e48066020a60c10a16cbef96a50d8d9c72a9f5cfa37563fe9308b30036a3cad8fa8110873bb1ae4d67616d4e9affadffe426c83d146e5b75ba8d102536c5f8498a10a14ed404b0e4f4e725968cc071d38321b639e3b6a7ad5bf4bfd2714e94911b7ed7585a78e84a56ef6c578dde460572a667b04a9553a42a76387e47352beee5d08c80b9a35a8d368a544846ea49c4398785", 0x9, r3, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) [ 2159.854811] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:38 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:38 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc02, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2160.919603] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:39 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioprio_get$pid(0x0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x5}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:39 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r2, @ANYRES16=r4], 0x5}}, 0x0) ftruncate(r1, 0x74) 13:45:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc03, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:39 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:39 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x5240, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40003, 0xfd) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000002c0)=""/203) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f00000008c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:39 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x8000, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0xa, 0x104, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000814}, 0x4080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10) [ 2161.391107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pig=18952 comm=syz-executor.0 13:45:39 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) syncfs(0xffffffffffffffff) tkill(r0, 0x1000000000015) 13:45:39 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0) recvfrom$llc(r0, &(0x7f0000000040)=""/232, 0xe8, 0x2100, &(0x7f0000000140)={0x1a, 0x324, 0x3, 0x9, 0x81, 0xfb, @multicast}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') pipe(&(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x2, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0b0000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:39 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) r3 = accept4$rose(r2, 0x0, &(0x7f00000000c0), 0x80800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000140)={0x0, 'team_slave_0\x00', {0x2}, 0x7}) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{0x0, 0x20}, 0x0, 0xfffffffe, 0x0, {0x0, 0x1}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0xff) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0400aa695ba9000000000000d20b0000000000000300000000000000db020000000000002a0e000000000000850a00000000000003d00000000000008b0b0000000000003f000000000000009b22605a80bf7a382de8801c6d7dd99289"]) write$evdev(r6, &(0x7f0000000300)=[{{}, 0x16, 0x8, 0xfffffbff}], 0x18) [ 2161.943950] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:40 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') socket(0x3, 0x2, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="17000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc04, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2162.138783] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2162.748985] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x6}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:40 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'tunl0\x00', {0xc8ce}, 0x3f}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:40 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc05, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:41 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r3, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff0d) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x86}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x81}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4040065) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbea250c00000009000700438beaeb800000000800090005ac0f000e000a00f178c1c322f8b26581c1000011000700511e23289b3b442c30e202a38d0000000800370001000000"], 0x54}}, 0x40) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r9, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:41 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x2001) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r4, 0x2, &(0x7f00000002c0)=""/106) msgsnd(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000001f1cbe08cf81bad72c24963ef7a85e99684b419879a7c296676436a322be3785b82fdb1662edac61aa290b9588fc652e169b140fe20f0b40592de6a47a0370d20000000000"], 0x4d, 0x0) clock_gettime(0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) tkill(r0, 0x1000000000015) [ 2163.507267] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:41 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e7cc61e1dc792794ff604d979517255435db097ffa709aaa94b15139aa66dde4144d7c2a6eb252a0330ac7", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc06, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:41 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:42 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r11 = socket$netlink(0x10, 0x3, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r12 = socket$netlink(0x10, 0x3, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRES32=r5, @ANYRESDEC=0x0, @ANYRESOCT, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRES32=r1, @ANYRESOCT=r6, @ANYRESDEC=r0, @ANYRES64=r7, @ANYRES16=r5, @ANYBLOB="9fc23778b78f44c712371e5f209f970b67df3e10c2518408a2a96bb40ccfd5bfd30abc4d37ec04003c08063a335ddfd70de574cb1ec9e314aa55b34da5d547d299c02c3a857e81d1b5f6bac1a20b4e217fd4d63c0290312f1d38ae0df7185e211f80b40a6398c94dbc42034d99", @ANYBLOB="8012d41d1fe089742df7b4ba5a696cadad4cefd7307fd71c5d643b0edb47172dba61deaf6ae4fd76e86ae783ab0bf20109e57280f4d9a6d2418864b69d7820e1acf7f0679057c4aff86b668640", @ANYRESHEX=r8], @ANYRESDEC=r12, @ANYRESOCT, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES64=r10, @ANYBLOB="83ef2af63f9e5130d7019a48de1262f8daeca3a9602389f06fcffa364d98ad84388ba26621a96832dae7e5da32259c9a49a150b4253c831e381674f7e6b3ad784c0d44a0466638a7e666190b2745a1787307b5c026ed159b87835fbbedae05eb1aaad5897a2cc192dada99e6ebee5051ce3ccf4067c13a58ccddfdd7b6661a2a", @ANYRES32=0x0, @ANYPTR64, @ANYRES32], @ANYRESOCT=r11, @ANYRES32=0x0, @ANYRES32=r2], @ANYBLOB="c71247065f119bcd378cafe34b7d3c0b1381b350911a97b2e0", @ANYBLOB="e3edea0dacd4f5e407f0ca6add9af8dfb889b33cbc6ad33dc8406a6151b132c6cd681983346f6526606589133ebfd3afd5360aff9b57ea0761b941d4af93030c1cbd87a10c44162928188facd60c024364b3b91ce990aa586c46bfde3067bba3dc63b2e24ccf37675323d00217f1cbefa03aa33cc9d149df9822fca755a0050c56ea8bc62b8b96d55071d7a6c63c31ab7856668df8c53666d2e1b65925d5ea9fd3c1efb45b9058d04598fdc9ec189a6c6aafbc65fd024583bfbf14e3cf76b2b64c553348e06cdd9a2a18147aad2ee556d54b2e0b739ba3", @ANYRESHEX=r4], 0xa}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) [ 2164.345654] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}}}}}, 0x76) 13:45:42 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) recvmmsg(r2, &(0x7f0000001b00)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000003c0)=""/239, 0xef}], 0x4}, 0x2}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/29, 0x1d}, {&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/75, 0x4b}], 0x5, &(0x7f0000000940)=""/4, 0x4}, 0x100}, {{&(0x7f0000000980)=@nfc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/35, 0x23}], 0x2, &(0x7f0000000b00)=""/4096, 0x1000}, 0x3ff}], 0x3, 0x0, &(0x7f0000001bc0)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x9}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc07, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:42 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x118, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7efa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:42 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:43 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x303880) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000140)=0x1) 13:45:43 executing program 0: r0 = socket$inet6(0x10, 0x800, 0x7f) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r2, @ANYBLOB=';,\x00\x00\x00'], 0x5}}, 0x0) 13:45:43 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{}, 0x1, 0x0, 0x0, {}, 0x0, 0xfffffc10}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x6aa4c2) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f00000018c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000280)={0x0, 0x7, 0x200, 0x20, 0x101, 0x8, 0x80000001, 0x6, 0xdf1, 0x2, 0x0, 0x5}) [ 2165.392477] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:43 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000000)=""/8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x8}, 0x16, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r5, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:43 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000200), 0xfffffffffffffd8f) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000280)={{0x2, 0x4e24, @local}, {0x1, @dev={[], 0x29}}, 0x0, {0x2, 0x4e23, @broadcast}, 'vlan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x20000000169, @tick, 0x0, {}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc08, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2166.229058] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}}}}}, 0x76) 13:45:44 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bind$xdp(r4, &(0x7f00000000c0)={0x2c, 0x5, r3, 0x3a, r5}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x5}}, 0x0) 13:45:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:44 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc09, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:44 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r9 = getpgrp(0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r10, r11, 0x0, r11}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r12, 0x81}) r13 = getpgid(r12) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r14, &(0x7f0000000080)=""/196, 0x20000144) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r16, r17, 0x0, r17}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r18, 0x81}) write$P9_RGETATTR(r14, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r15, r17, 0x0, 0x7, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0x2, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) r19 = getegid() r20 = socket$netlink(0x10, 0x3, 0x0) ioctl(r20, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r21 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000a00)='cgroup.type\x00', 0x2, 0x0) r22 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r22, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) r23 = socket$alg(0x26, 0x5, 0x0) r24 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r24, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) ioctl(r25, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r26 = socket$netlink(0x10, 0x3, 0x0) ioctl(r26, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r27 = socket$netlink(0x10, 0x3, 0x0) ioctl(r27, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r28 = socket$netlink(0x10, 0x3, 0x0) ioctl(r28, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r29 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r29, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r29, 0x113, 0x1, &(0x7f0000000340), 0x4) r30 = openat$cgroup(r29, &(0x7f0000000a40)='syz1\x00', 0x200002, 0x0) r31 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r31, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r34 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r32, r33, 0x0, r33}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r34, 0x81}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r37 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r37, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) r38 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r38, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r39 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r39, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000c00)=0x80, 0x80000) r41 = socket$netlink(0x10, 0x3, 0x0) ioctl(r41, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r42 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r42, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r43 = socket$netlink(0x10, 0x3, 0x0) ioctl(r43, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r44 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r44, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r45 = socket$netlink(0x10, 0x3, 0x0) ioctl(r45, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$netlink(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)={0x554, 0x3b, 0x380, 0x70bd29, 0x25dfdbfe, "", [@nested={0x186, 0x87, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @uid=r5}, @generic="ee0c8d7276fb2f9fcf4a653ab1250c9a874a057f56473903ebb8d08978087f629c319f95664787085d19ed26da2776f5c197402648ff2afccbc76abcac9a849f6b01cdf3e5e45b4002e88f36077fcf55bc92d1e398fcfc78985cdc614be35532b547bbcf23a41e63e5cc0e4749a97bf4b97110c1f04e84c888b9c4430bd0ed1d569320e7313b667ba072677ab1fabf5e6c39b04f5c6f74fd066ccebd5d637c7b2b4be96d", @typed={0x4, 0x45}, @generic="b4e9a73a0ff12d8547dad55005e36cba9a", @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @typed={0xb3, 0x77, 0x0, 0x0, @binary="a3bd5e93e473c776953088677c5ceb6c18576f82c8522bb21459f35b61823217ddedbed0b15b46bc7a117b4d9a57ffe9397f5fade47b906c35d62317e892c829c274b1625e7e3bdebc9e9ba49a164e31b691df92ef71d9daf7469ccfab6c7ffef41069a049d72c4c4a02bfe1ca10b58da84720732b5d4064565cfd5f1c1eb4a87cd37c1db972e4d9cb36e7520d74e0921d157a7a6f37cda802161ad2bf3f29dc0735fa9b67c5f7b5db26946e328422"}, @typed={0x4, 0x59}, @generic="a3"]}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@local}, @generic="3dd95cefc11f4733ef1b8eb669ad9bd1f0cbf2e910f51ed448c5a3f811ffbc5a0d2ea0d429", @typed={0x4, 0x48}, @nested={0x2d7, 0x1, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @fd=r8}, @generic="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", @typed={0x35, 0x5, 0x0, 0x0, @binary="d471d21fd404a078f3f236bbbb2988c487da1dc7d3b8cf39785d32b478b9d7b4444dac548eb8572b7bb8b3d6caa3e4bfa9"}, @generic="89d8b7725786115843d4421483c8006610a39c97bcff7da5182a9a904769cb05f76142a95538cdac7d3672d0dcc0b3646ca7cef632b24cf7a55b6a2691b446a9c470836f068a10fb1698b93dadf9b666c92362404308903d10a40a99b0c80144421ae27576b552057cfaad9f8d690b5db5764e739705fd3bddc0d2be37cc2d8caad19f355e591820dd5340b6f15ed99f93e1778c4df50d70f0214afeb322ff4219c97cec7daafbb5f3428a4d51e3675d026191b44fa5dc308fdfa995d3b681585d145ed705fd06e7655b7f7e4b0ced41fac8292bde6b52a652e7ac90cb3c09d547415dc7c20ed516", @generic="b38ee44db346c9721d03be863d31111d3b0463e6a8a879f78f5b34e56eca0a3a31e9101428976dd0b535200df1049ffa2438e80b417e799e04eeffe173b94f54699c0eb4985234a1391ffe05b4f95147cd35c367839569df0f75e040816aff38b04c2ba2cb38cb774c4f543b7a556887a8c10a65a2ffa6a0e37001b300091f9535fc23235eee4c2a13a42c2614b527dfe1d5eab53e39140cea1a5c82b9b3f849a1b97f6af7597090", @typed={0x8, 0xd, 0x0, 0x0, @fd=r3}]}, @generic="2009b6bd360074ab436556577cefaa125372d6b551d7af3d7f43b2c96416f51c126462a4f47eb3638cd060d0fcd0daf4659e42e133579fdd", @generic="b392689f412c7486dbedf24470bbf181186de640f27d73614a1755bc5435fb9650db2259d68aa29bfcd245c0917eb4ea5477145f4a576f9f5953543ed3c8c3b571cc193fc575711af93c88833470b05abf1788a6fb936c1b3c55deee10af6656b1d9d5b9f946fe9c5bee1a92ff4d1db6da19c5ff2a3cad798178"]}, 0x554}, {&(0x7f00000000c0)={0x20, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x5c, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r1}]}, 0x20}, {&(0x7f00000008c0)={0xb0, 0x32, 0x8, 0x70bd28, 0x25dfdbfd, "", [@typed={0x4, 0x5}, @nested={0x78, 0x5b, 0x0, 0x1, [@generic, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="6fc00258c08c2a27a8da300c0eeca86e2c1423d9837dcbc445b174571ee6ea4a3c2c0cb1397f2075517e2aa2d4ef55bae85b5e7abacad6baab46944e06fcf4a120c3736c2671063c560312cfc592387368942e66a0a447faff8a0824b783cc6a"]}, @generic="8202ff4296c20cf7dd78eabf888f0a646e978a95a0ac99", @typed={0xc, 0x5a, 0x0, 0x0, @u64}]}, 0xb0}, {&(0x7f0000000140)={0x14, 0x2a, 0x2, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0x39}]}, 0x14}, {&(0x7f0000000180)={0x24, 0x38, 0x100, 0x70bd26, 0x25dfdbfe, "", [@typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@rand_addr="c8eaf500e8a132760d373a8152ecfe90"}]}, 0x24}, {&(0x7f0000000800)={0x54, 0x32, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@generic="ffeb1bbe352df55380161c61b2d76298b4ae522128c49ee2c569d0318e2fa45026b6b83652df590cb7ee02e671261a77a7338963b5999bf8e12a4947838bb61350e04e"]}, 0x54}], 0x6, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, r19}}}, @rights={{0x34, 0x1, 0x1, [r20, r21, r22, r23, r24, r2, r25, r26, r27]}}, @rights={{0x28, 0x1, 0x1, [r2, r28, r30, 0xffffffffffffffff, r31, r1]}}, @cred={{0x1c, 0x1, 0x2, {r34, r35, r36}}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r37, r38, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r39, r40, r3, r41, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r42]}}, @rights={{0x24, 0x1, 0x1, [r3, r43, r44, r1, r45]}}], 0x140, 0x4000000}, 0x20000001) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:44 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x1c}}, 0x0) 13:45:45 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fcntl$setstatus(r4, 0x4, 0x800) 13:45:45 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x14, 0x11}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8d1}, 0xc0d4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc0a, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2167.274660] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:45 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$VT_RELDISP(r2, 0x5605) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000180)={0x1, 0xfffffff7}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:45 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0053f9c2", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb719807f9edf0aee2a7e95f662d09c6a268c1fa296ea2221541ca643922891"], 0x5}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000080)) 13:45:45 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{}, 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2167.963534] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x2]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:46 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:46 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRES16=r6], 0x1}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYPTR64, @ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="df659fe5e57ab6099877cc7ec3328a5edd801002009f0f055791c27159f30cd33c685744"], 0x5}}, 0x0) 13:45:46 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc0b, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2168.651691] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc0c, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}}}}, 0x76) 13:45:46 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x321) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:46 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000100000000000000000000000a0900010073797a30000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x24000800) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:47 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x100, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 13:45:47 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0xcaf1, 0x200, r1, 0x0, &(0x7f0000000140)={0x9b0950, 0x5, [], @p_u16=&(0x7f00000000c0)=0x1ff}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:47 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x7db9, 0x7, 0x6, 0x679d, 0x3f, "0d5100d00e3184e4ff5f9618bcc55d3387335d", 0x8, 0x38}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1c}}, 0x0) [ 2169.384163] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x3]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:48 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x7}}, 0x18) 13:45:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc0d, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:48 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:48 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000010", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYRES64=r4], 0x5}}, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) socketpair(0x1d, 0x6, 0x1e, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082bbd7000fedbdf250200000008000200020099000800020002000000080002000200000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x20004020) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x2b, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044082}, 0x0) write$P9_RWALK(r5, &(0x7f0000000040)={0x3d, 0x6f, 0x2, {0x4, [{0x20, 0x1, 0x1}, {0x10, 0x3, 0x3}, {0x10, 0x4, 0x5}, {0x929ddf72465e4fed, 0x0, 0x3}]}}, 0x3d) 13:45:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x3}}}}}, 0x76) [ 2170.057949] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:48 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x400) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000040)=0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280b3dad682399917cf03f70481dd5eddd2000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc0e, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:48 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r6, &(0x7f0000002000)=@ethernet, 0x10) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r6, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r8}, 0x10, &(0x7f0000002ff0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004596a7556509e1001800000006b36f18455ee217c4b8059de4303341166c8b8f7c06d5ec35c0b97a55832eaee2be07c943b38e2aaed8a4156eea6a224ad2c0fe5fa9ab3c3a349a1d0f7c8cbcacdb88f6583550f426721fc3e4982fd65df69fdc8a9459542ea2c5c1294f75cd6252626fd9dff1836357acb39808eef3ababb665f954c5b3c12b35afea48def20cf999da4d0ffa7abd4b1a5850e543020f3168277aa8ad8f40837948af12d04c6284eaf4180b8d1529be78a28c8c63258845f67bb47a0fd1b5d13deb25ea"], 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) ioctl$sock_netdev_private(r9, 0x89f9, &(0x7f00000008c0)="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") sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000ffdbd72501000148615ee178aee77f05001400018008000100", @ANYRES32=r8, @ANYBLOB="0800030002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20004001) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r10, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r10, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205647, &(0x7f0000000380)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x990a70, 0x9, [], @p_u32=&(0x7f0000000300)=0xfffffff9}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000480)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000004c0)={r12, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000580)=0x84) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:48 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="0000008000"], 0x1c}}, 0x0) 13:45:48 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000000c0)=r5) timer_create(0x0, &(0x7f0000000100)={0x0, 0x200012, 0x4, @tid=r0}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:48 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) [ 2170.824258] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x4]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:49 executing program 4: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x1ff) r0 = getpid() setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', &(0x7f0000000180)='vboxnet0*^GPLtrustedvmnet0*Bvmnet1@vboxnet0\x00', 0x2c, 0x2) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{0x20}, 0x0, 0x3}) epoll_create1(0x80000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_dev$mice(&(0x7f0000001d40)='/dev/input/mice\x00', 0x0, 0x4c8280) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000300)="5ef8a2ea898aecffac2278923f4e3abb53da261e1455dd6e092a5d9664abbe5609864de2a0bd03b8d45e061256da4aa1e57503d53dba134d0b82491f198dfc21a77c2c053f011ae0e9f30616ae08d271c091a6c320e6fb67cbbf427a9075083018541bf47ba6de5456f7c564c91275d2e23ca1a1dd6272f52bb008e9afce8cd35af62ea0757bad41835dc4167226633ea1a5241dc12c0e093ff357ef5e4256bd12f075f44586b15c93117118cb712056ab974a9c80de97e35aec1e52506f8214", 0xc0}, {&(0x7f00000003c0)="10f4162bfe084ce1475fcb24fbee159b6e5b3beb8aa4d85bc8d39be9660f76339188e6921c6418ca096db4dfe2b71a8cc93514f3bc1d4e942de89cfd86cd1ad8fc7c3c60b6df7031e00d0b6c92e0017a9a365c013e3664e7aa51b35aa596ea3c725b28453f8e274f1291bca3a4d94a74e5f3905e6a1a5568b3a615e993f82c8e0394bfa094d3dd0564c516c313ec5cf284903d248599e591e021007ecdd73e4574b112d1c033f760eab83f69b0a73c82ed46273057d9c78b6753cd1f78cef200e9cf9f764f84930c04fb6a2c64909a84b143aac2fc28c5c5fb99cf040c4b16bedc9479c12466647f0865dae27a531336bf1d95c5a8c651606ddb1e648c", 0xfd}, {&(0x7f00000004c0)="82f09180d53be4fce7218aa253f25b09a6e80621257697d255afdfdca6b6b7c883633105f58933ab68000358e39d4a5b5d7d09aa9c0e4a88d53f59f87fc3e64fefe9e09822b04c65e13a76b6280e9ec8d1f9d1036b08bc6c7d7da0e4adf4e4d1cb5f17d82b4cb27cac00d0", 0x6b}, {&(0x7f0000000540)="8492341db7b47807403783810399665763f53535a5f885ac2d5560a8d84aba00a694e9811683a13a1712fe0dd4d6220b8e467b0f7c3cd1a71278d02e5bbbd2a7fd5c59c98f80dbeb908ec59677967236f51f22ab49df04b6dfdae1429e6e05", 0x5f}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="ed81d2ceb22692f78bd4e1bca0c3b35e8bacef2edb74036b40c59ef1d9dfc390e18ce4a9df107e6e0bfbcf6f08b165fbea1ca08cb62a7f51f047c892a048e46387ac8644ceabb5ae5dfd4920fb7e229647a4823aae457b131e7d4cdbd589af713a45e8e02309aa56c06ad3123ea1e42e663ead7f6253475fafa3160e82d0ce81c3f20ece9fb651bd8a58580baebce725cf0cb8e903cb49a19cd2c390522c064ba17d03a77b4f47e9376f0293151b1bb0d41890d24aa53860e55080e42d2b4a286215d4405a3efda65e17d4d9a31026e1cd63116bf71f0a7966b62486297dd810ba7335", 0xe3}, {&(0x7f0000000700)="83890151bce470b7810ecf0f023aa32082391b70bdaadb12b309b4fa5a1f9381f72b3166327dd55cfc4477c05fd732773c560a7830d3403000d8e32592800efd7482381803e3658bf19551148444949750e71eb237515c4fd89653c3e42cf40af79fcabf39c87b70e85ab20b3f9348c915e213ed97cdd23f29e492706a47364714801f69930ab76a037196a1a968e888e48dd1137e0ad15c37a9d72c900eec3e71abeba0a2829073614f56ffd70ab5c140f3107db361b296c3094a45a48a3eb2ab254853898b13b65d0c", 0xca}, {&(0x7f00000008c0)="af107b53a0ccd4b95ef09224c64ce26319a789ff31e0a936d0d4160be24a1262392295b4b3cf6cb69caa9de1294dd51f7de975c0ee275a9bf5518994b13c0726b23abd9ae31461d64f198e6f3687d6503abe25231b9f73d3b2e010b8ac8e6127b0803c5942e6320dc666577280e5b2d871d6404c13791606774f50ad3da98a370a503d592f54e016603c2f1a72703ca5120a2a0fe65955a856730898b89b0aa2be0e36a865a4b89101061e53d5dc84d9f2", 0xb1}, {&(0x7f0000000980)="a1b7f4a93790869db490819f46bb39b35545bd5b6dea7afae4fd7a4b887867f7ef88a08287bb375821c577b846386c8f62f2b43243cb75d7e8fbdd43a5b66b6f9ef05a9eafdfd42c0aadcc8052d0bac5c9a3942e5e15c32898512a0bd4b9bad2130ba0e7f800d4c18b04fa62c56ceee9aed4f6b7b9a1a298cfd559e002f074523f0c2878645992c2b13605bf224933165dc1ebebee2158d4362e3faea10282a7d25317f4eb6b343e434f18a99adff785086c205700dd2b381ac162a282ee7de3", 0xc0}], 0x9, &(0x7f0000000b00)=[{0xe0, 0x10b, 0x2, "91e1bab2c99d9d30f4276068b0df18f5d4d4c65b8111c58618be3ee981727649328c642b561700836827114db3f52a363f0662d9ccd735675d0362cb963b5c0b6af631cb19e7c8ea68915e80da2201ae442fbbeb6e49a0c0f8dc0f4bf981bedf20c84e15a2c0f1dfd694cdace4aaa4ac502f0c59222c7caeb3b3d089f43b708c6ecc4d838b882771ee08b9bf7b1814b69ae53ae433379ee5c81834be3afb92f35d9d48a32789aab855377e98b795084e03de9ad54f7779482d03f2efceac6496c3316763bdbf892afb1c9b0df6da8f"}, {0x78, 0x10f, 0x400, "1661e0efbe1d552274a60d76e57e8ffa8b26b2315124de2866b2a3f12c17e90e832d249cc418a331b2250f58b64eb8b687160373074452d0e20d6592eeb989d89d6fd79153b36fb8dbbd5760de1488f4c6c0d1ac356e55a8049e2ac9e19321d3a0aedba6"}, {0x90, 0x84, 0x0, "6ead334bb60aaae2205f183a15ce080a122d52eb9e5f10cc84a9ddf0124e80879f93c90a2fafa86b4b1665e76f4d68b68768b2e3f895b012b32d83cc0688ac0ecd2d2b672f6e047835c0b8f78bbd4a401a5fd0ef4d3a7fa18ea48960c3fd323885830b5b548dd144aa1166f0ad59441070db40bb93418d8982ba44bd04"}, {0x68, 0x10a, 0x3, "bd5b6e69ff282749da762d60b899bffcf3dfa98cc2cc17b6406cb4a879ef692d158e0576ba3f1bff8588789e3f0d8dfc5d695d92cfafb8e3dc0e268d396be33ddb9d74b1481069ed8cd525bd3b5bb091cdf853b3468ec007"}], 0x250}, 0x4) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:49 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc0f, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:49 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x3a4, r3, 0x73e, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e3bfb71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x231bc0d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4350}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d5d}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x258e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x584e6a46}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f97b5c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e15a873}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ce76290}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bbf3559}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65fc52b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59b4ed50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa309}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b683742}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc311}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x199e27f0}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c379935}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb2026ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe033}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x506f9a14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3944b27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x398}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd87a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b592d96}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4639}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5109}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x230a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x936e}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65f5acf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e97dc37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1902}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ff8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x128f11b6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31f87626}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18bb4175}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f917a67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ffb1ed1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x422b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42759f67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cbf5b11}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53e631bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9811}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc03d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e4d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbe90446}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf32a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf96ad9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x519}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc8c1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e45b5b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47bb6c7c}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eee87ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1af37e26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc97e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa7390c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7278}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22b8c338}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xaecf253}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x575a7725}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e3918fa}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59262cab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6756b35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3232}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa871}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd7fbe32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43f7}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74e3dd87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b23f903}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180b8abb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x487f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6df}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37a943d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98f2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd656}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc007}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb731}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58419acd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x3a4}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x4}}}}}, 0x76) [ 2171.747672] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:49 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r2, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc10, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:50 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000380)={0xffff, 0x4, 0x6, 0x0, 0x4, 0xab}) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) keyctl$read(0xb, r3, 0x0, 0x0) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280)="5e1525f62ba70ccc3b9503505e94285550a104178b7429f910673e9b3e3e140569d3477f51543f9b7e7fe723070227b1f9e121910bc19c2ffccff3fee8c6556e5a06bf6cce7f8df9bd005ee1bea8b946d26288471b8b862fd11fe76bd9972298fb87ec4020284a560b976d42c8a3ffab39a9c9424f9d65700ef7b4f764a3d4a96a2f923689e7fbbe593eeeb41d2b70c7ed63ba05306df78d8ee0293d9ec0e74fb65ae1e5cc5c71b8e7a261ee2dc845f27ef23492c572a5f78a51b1d2601245c29390b7c0475bae39d8d2948ed77c7ddae2dd74d6b18a95c19f878f41a4e9bea0cfa0fc64c86fcde41d60c71cd3fab394ba61dc44", 0xf4, r3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:50 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x8, 0x3, 0x4, 0x200000, 0x1, {r2, r3/1000+10000}, {0x4, 0xc, 0xf9, 0x5, 0x2, 0xfe, "71e7e80a"}, 0x7, 0x1, @planes=&(0x7f0000000140)={0x2, 0x6, @mem_offset=0x9, 0x81}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000008c0)={0x9, 0x108, 0xfa00, {r6, 0x0, "1174d6", "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"}}, 0x110) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$AUDIT_ADD_RULE(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc060204}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x444, 0x3f3, 0x100, 0x70bd25, 0xfffffff9, {0x3, 0x0, 0x30, [0x4b4262c, 0x6, 0x8, 0xe2, 0x6, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x4800000, 0x7f, 0x6, 0x8, 0xffffff1a, 0x0, 0x7f, 0x34, 0x0, 0x9, 0xfffffffb, 0xdac3, 0x7f, 0x7, 0x10001, 0x2, 0x8, 0xffffff7f, 0x2, 0x20200000, 0x800, 0x3, 0x0, 0x7, 0x24, 0xc72, 0xfffffff9, 0x400, 0x40, 0x2, 0x7, 0x80, 0x578, 0x400080, 0x4, 0x6, 0x6e7c, 0x8, 0x47ea0402, 0x8, 0x5279, 0xffffe6a0, 0x2, 0x93, 0x80000001, 0x5, 0xf13, 0x3, 0x0, 0x3, 0x2, 0x80000000, 0x8], [0x400, 0xb7, 0x7ff, 0x7ff, 0xc, 0x3, 0x2, 0xfffffc01, 0x2, 0xfffffffc, 0xb95f, 0x2, 0xffff5687, 0x1, 0x4, 0x8, 0xfffffffd, 0x3ff, 0xc5e, 0x321d, 0x9, 0xfffffffa, 0x4, 0x8, 0x94, 0x5926, 0x80000001, 0x7, 0x1, 0x8001, 0xffff8000, 0x8, 0x0, 0x6, 0xffffffff, 0x9, 0x4, 0x3, 0x2, 0x32, 0x3, 0x8, 0xff, 0x9, 0x4e67, 0x100, 0x2, 0x3, 0xd50, 0x4, 0x9, 0xd1, 0x8000, 0xff, 0x2, 0xffffffff, 0x8, 0x8, 0x7ff, 0x7, 0x1, 0xd44, 0x0, 0xe63e], [0xfffff569, 0x0, 0x7fffffff, 0x5, 0x7, 0x2, 0xbb, 0x79853366, 0xa1bf, 0x8, 0xa50, 0x0, 0x4, 0x7fff, 0x2, 0x6, 0x400, 0x5, 0xff80, 0x0, 0x0, 0x2, 0x5, 0x8954, 0x2, 0x9, 0x10000, 0x81, 0x5, 0x8, 0xb31, 0x0, 0x9, 0x200, 0x5, 0x4, 0x8, 0x1, 0xffffffff, 0xfffffffe, 0x3, 0x101, 0x1, 0x5, 0x1000, 0x8, 0x2c0, 0x1000, 0x1000, 0x6, 0xffffffff, 0x4, 0x6, 0x9, 0x159b, 0x7ff, 0x0, 0xfff, 0x0, 0x8001, 0x4, 0x1000000, 0x9, 0x79d1], [0x40, 0x401, 0xffffffff, 0x1000, 0xffffffff, 0x9, 0x8, 0x2, 0x4, 0x1000, 0xfff, 0xff, 0xb1, 0x7f, 0x5, 0x4c8, 0x0, 0x200, 0x9, 0x800, 0x7, 0x9, 0x8, 0x7, 0xffffffff, 0x9, 0x6, 0x3f, 0x8001, 0x8, 0x8, 0x0, 0x7fff, 0xfffffff8, 0x1, 0x1, 0x9, 0x7, 0x40, 0x4, 0x3, 0x3, 0x101, 0x1, 0x10b23b2f, 0x2, 0x0, 0x6, 0x1, 0xf1, 0xfdf, 0x8, 0x9, 0xffffffe1, 0x8, 0x100, 0x4, 0x2, 0x5, 0x80000001, 0x1, 0x4d, 0x101, 0x1f], 0x21, ['batadv\x00', 'ppp1\x00', 'batadv0\x00', '/}proc^:ppp1\x00']}, ["", ""]}, 0x444}}, 0x44001) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r10, @ANYRES16=r7, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r8, @ANYBLOB="df650f9eb7"], 0x5}}, 0x0) 13:45:50 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{}, 0x0, 0x0, 0x40000000}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2172.414319] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:50 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x40) r3 = dup(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1140020040b45c553b10b0842b3113f6d84f2cddabc55fe86e58386d5da1a321ff82a467189b8cdac5ac757f83da683d3fc87951085094ee795d28", @ANYRES16=r4, @ANYBLOB="200028bd7000fddbdf2509000000080004008374ffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100a40000080003", @ANYRES32=r5, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) [ 2172.693325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 13:45:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x5]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc11, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:51 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 13:45:51 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:51 executing program 0: socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) ioctl$sock_ifreq(r1, 0x8916, &(0x7f0000000000)={'veth0\x00', @ifru_addrs=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}}}}}, 0x76) [ 2173.131223] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc12, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:51 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000300)={0x0, 0xffff25f1, 0x6, r4, 0x0, &(0x7f00000002c0)={0x9909d7, 0x7, [], @p_u32=&(0x7f0000000280)=0x9}}) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r7, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:51 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) setpgid(r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x781b02) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$peekuser(0x3, r3, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r6, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x77, @remote, 0xc07}, r6}}, 0x30) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:51 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) tkill(r0, 0x1000000000015) 13:45:51 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000000)) 13:45:51 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x1a, 0x0, "61c841dc784e67b52b0af2937877713f87fac83ec2d0f2e9f6580b9c55d4aa8229cd46194c546a2475394b1ec47bfdd27c2c7c93183ec444ef9b4d0a021673a4184c375b6bc77202ceeb02888f74950d"}, 0xd8) tkill(r0, 0x1000000000015) [ 2173.868139] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x6]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:52 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:52 executing program 0: socket$inet6(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x5}}, 0x0) 13:45:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc13, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:52 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x89, 0x67, 0x5, 0x92, 0x0, 0x80000001, 0x200, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_config_ext={0x1, 0x8}, 0x4, 0x7ff, 0x80000001, 0x8, 0x7fff, 0x1, 0x2}, 0x0, 0xe, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f00000000c0)={0x7, 0x1, 0x7, 0xf8, 0x2, 0xfffffc01}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x6}}}}}, 0x76) [ 2174.702669] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc14, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:52 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/616], 0x18c}}, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000400)={0x9b0000, 0x1ff, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x990967, 0x5, [], @p_u32=&(0x7f0000000380)=0x6}}) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xfc6e9b31bea8fe66}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x100, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x8001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x200000000bd, @tick=0xfffffbff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x8}}) r5 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x101000) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SNDCTL_DSP_GETCAPS(r7, 0x8004500f, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_IOCTL(r7, &(0x7f00000002c0)={0x20, 0x0, 0x6, {0x3, 0x0, 0x0, 0x1}}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:52 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYRES32=r4], 0x5}, 0x1, 0x0, 0x0, 0x40040}, 0x0) [ 2174.943020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:45:53 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0x400800, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x8, 0x1000}, 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400001, 0x0) ioctl$DRM_IOCTL_VERSION(r6, 0xc0406400, &(0x7f0000000180)={0x6, 0x3ff, 0x2, 0x8c, &(0x7f0000000280)=""/140, 0xdd, &(0x7f0000000340)=""/221, 0x3b, &(0x7f0000000140)=""/59}) tkill(r0, 0x1000000000015) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000880)={0x0, 0xf, 0x0, 0x8}, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=0x10001}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000005300000095000000000000445a0708d1303274df96965142c50000000000009a791dba3e4233542f67a07e7255df2fa25dc49432457ddde8ec5afff74287d7b8e902ab041da7cbfb0fccd473038d958723088900cdc2ffcc604a94dbf6fd2cd61b0dfc2cbe6880"], 0x0, 0x0, 0x2e, &(0x7f0000000500)=""/46, 0x41100, 0x9, [], 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x8, 0x3}, 0x10, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, r7}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x1, 0x1, 0x6, 0x3, 0x18}, @generic={0xf7, 0x1, 0xe, 0x0, 0x1}, @jmp={0x5, 0x1, 0x6, 0x9, 0x3, 0xffffffffffffffe0, 0x8}, @jmp={0x5, 0x0, 0x8, 0x4b14c6766cb8b356, 0x1, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @jmp={0x5, 0x1, 0xa, 0x4, 0x3, 0x0, 0x4}, @exit]}, &(0x7f0000000580)='syzkaller\x00', 0x100, 0x4a, &(0x7f00000005c0)=""/74, 0x41100, 0xc, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xb, 0xacc, 0x101}, 0x10, r7}, 0x78) 13:45:53 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x5}}, 0x8040) [ 2175.350180] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc15, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2175.883636] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x7]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:54 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7eb3a99c17484fbd1ba10dbd9b385f912ab6b0f2af1cfa575758bba48ea04ea4605a1754b5d7a8eafb360f7c0d0ee"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x80}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x54}}, 0x0) 13:45:54 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000480)) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r3 = socket$inet6(0xa, 0xa, 0x4) fstatfs(r3, &(0x7f00000003c0)=""/183) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000280)={0x1f, 0x2, 0x1ff, 0x6, [], [], [], 0x3ff, 0x3, 0xb1f3, 0x20, "a23665109df83702c35544b018f14da8"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r7, &(0x7f00000017c0), 0x375, 0x0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7c, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000040)={r11, 0xffff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000500)={r12, 0x36c, 0x6}, &(0x7f0000000540)=0x8) 13:45:54 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc16, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2176.362591] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x7}}}}}, 0x76) 13:45:54 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x40a, 0xfff}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc17, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:54 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) getpeername(r4, &(0x7f0000000000)=@caif=@util, &(0x7f0000000080)=0x80) 13:45:54 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r3) keyctl$read(0xb, r4, 0x0, 0x0) keyctl$unlink(0x9, r2, r4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000380)={0x80000000, 0x2, 'client0\x00', 0x1, "6d0f882c00d97221", "3bd5ecb57810be866f814e498e4da90a9ba1a8ac1b8b018299c69a237ad0f5b3", 0x7, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x0) r8 = dup2(r1, 0xffffffffffffffff) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f00000002c0)=""/119) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000000000000ff01000000000000f77bfdc61792375b2c8e476ea7ec31281c82de61e9cc59450dffa1a9118a67dfca9800205b20baf4368818eb5f0178a1966eb3204a792254cbd22f5c352662167d26dc"]) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) r11 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r11, &(0x7f0000000800)=@HCI_EVENT_PKT={0x4, "06f058d96854bfcc4dfe858f60af0db99867765e7d6cb11d4dba78a963fe0f7559be"}, 0x23) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r14, r13, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff0d) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r12, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x86}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x81}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4040065) sendmsg$NL80211_CMD_NEW_MPATH(r10, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r12, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x4001) tkill(r0, 0x1000000000015) 13:45:54 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:55 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x55f0, 0x8, 0x4, 0x40, 0xfffffffe, {}, {0x1, 0x2, 0x81, 0x81, 0x7, 0x4c, "7ca3e5e0"}, 0x9, 0x4, @offset=0x8, 0x800, 0x0, 0xffffffffffffffff}) write$FUSE_GETXATTR(r3, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x2}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) [ 2177.103702] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x9]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:55 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0x78, 0x18, &(0x7f00000008c0)="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", {0x4, 0x0, 0x30313953, 0x4, 0x0, 0xffffffff, 0x1, 0x4}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc18, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:55 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x3, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3f}]}, @NFACCT_PKTS={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r5, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x9}}}}}, 0x76) [ 2177.856566] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc19, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:56 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x101200) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:56 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050203000000000000f9315ba90000000000", @ANYRES32, @ANYBLOB="df650f9eb7"], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r4, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xca9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4e8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80) 13:45:56 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r7, &(0x7f0000002000)=@ethernet, 0x10) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r7, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r9}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000340), 0x4) accept$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r12, &(0x7f0000002000)=@ethernet, 0x10) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r13, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r12, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r14}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB="000000000000001adf2365ba6a000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000000600000000000000"], 0x48}}, 0x0) accept$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r16 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r16, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r16, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$PNPIPE_IFINDEX(r16, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x184, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x20000010) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2178.465577] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:56 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x7fc, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac04, 0xfac0b, 0xfac0e, 0xfac07, 0xfac05, 0xfac04]}, @NL80211_ATTR_PROBE_RESP={0x7c9, 0x91, "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"}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x40081}, 0x4000) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc1a, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2179.206861] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x11]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:57 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000100)={0x0, 0x2b}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40845}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:57 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:57 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="0014000000"], 0x1c}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x422e02, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x2}, &(0x7f0000000100)=0xc) 13:45:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc1b, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x44}}}}}, 0x76) [ 2179.447896] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:57 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f00000000c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:57 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e5048000", @ANYRES16=r2, @ANYRES32, @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x5}}, 0x0) 13:45:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc1c, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:57 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0x20) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:57 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0xffffffff, 0xfffffffa}, 0x0, {}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:58 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2180.348064] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:59 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x80045301, &(0x7f0000000000)={{}, 0x1}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=r5}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:59 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xe501, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0xe2023, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x2, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb12}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x7d, "945fb83a9435b3392cec938a5df5433179c5e9f7d55856c059a4fef6a57b4707c9fc1c3cf0ecd50605f25978ae07dc205b2b852145c6763cbe949c1dcedb364d75e001cfd6015331e17b5036e9ba91f8b0a0f81d6d7901c70db3aed0dcf414c144b218eb33f902085aa5442f9884c091513984f2f4155bf736cf454b16"}, &(0x7f0000000380)=0x85) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000440)=r6, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r7, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc1d, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x60]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:45:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2181.019012] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 2181.086726] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:45:59 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:45:59 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00') r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000840)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000004140)={@local, 0x0}, &(0x7f0000004180)=0x14) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000004280)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004240)={&(0x7f00000041c0)={0x58, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd9dd, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x58}}, 0x4004880) read(r1, &(0x7f0000000200)=""/18, 0x33c) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x200001, 0x0) ioctl$SIOCX25GSUBSCRIP(r9, 0x89e0, &(0x7f0000000500)={'netpci0\x00', 0x55, 0xd}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xe0, 0x13, 0x200, 0x70bd29, 0x25dfdbfc, {0x5, 0x8, 0x0, 0x1, {0x4e24, 0x4e21, [0xb9, 0x6, 0x1f, 0x6], [0x7, 0x9, 0x1, 0x40], r13, [0x10000, 0x8]}, 0x3f, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x80, 0x1, "a0e3e203d00126d9cb536f3330d440e6ef58bb0ea6624217c348c03cfc32cc611878a939cd2551f62fa329a7e01599fa4c6424b3e3d5ad162789b8b9ee3aa1540457bc84f9b8658cd40b722054acb76d16e28eee136ec0fea520650b52b8ebf4a47965a78892fffcb2e0d4df6c736b3c9ceced3c19515f6b093f6b51"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "406be071628aff949194056e8fd4e5"}]}, 0xe0}}, 0x0) tkill(r0, 0x1000000000015) 13:45:59 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x4000, 0x1, 0x1, 0x7fff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:45:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc1e, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:45:59 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101083, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/ocfs2_control\x00', 0x4a0002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1, 0x20) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8100, 0x0) r9 = memfd_create(&(0x7f0000000480)='Yz\xb7{Est\x00'/19, 0x0) r10 = dup(r9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r10, 0x404c534a, 0x0) r11 = dup(r10) ioctl$DRM_IOCTL_AGP_RELEASE(r11, 0x6431) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100000, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x26, 0xa, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r15, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbf9, {0x2, 0x80, 0x20, 0x1f, 0xfe, 0x3, 0xfd, 0xb, 0x800}, ["", ""]}, 0x1c}}, 0x4040) r16 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r16, 0x8983, &(0x7f0000000280)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) getsockopt$SO_TIMESTAMPING(r16, 0x1, 0xe, 0x0, &(0x7f0000000100)) r17 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r17, 0x1, 0x34, &(0x7f0000009000), 0x4) r18 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r17, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r18, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41000}, 0x1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r16, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r18, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @rand_addr=0x7ff}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) sendmsg$NLBL_MGMT_C_VERSION(r15, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24520118", @ANYRES16=r18, @ANYBLOB="000428bd7000fcdbdf250800000008000c000200000006000b0029000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x4c000) sendmsg$NLBL_MGMT_C_REMOVE(r14, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r18, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x2e60a808d3ddbbb0) sendmsg$NLBL_MGMT_C_VERSION(r13, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24c2552}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="480073a059c7500000000080001efae73da3dfc5d3a5913a56255f60cd3893a1c9644d8d09d945bfdbc019b279ae6d4126ca36f68c", @ANYRES16=r18, @ANYBLOB="01002cbd7000fddbdf250800000014000600fe8000000000000000000000000000aa08000700ffffffff080004000300000008000800e00000010800070000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NLBL_MGMT_C_LISTDEF(r12, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="00012bbd7100fddbdf2506000000080002000700000014000600ee8800000000ff000000000000000001080008007fc500011400ed592554e4d40b988236be8f8c74019ddedf"], 0x4c}, 0x1, 0x0, 0x0, 0x40108c1}, 0x94) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000004c037ec7875b0d2156fe25ae02195de6113dfc1eed279438b081463a370c7e7880c8555d13153504adbc1b88a596f000d2ec0b6d4df3b2833614b5d260f99cdaecf08f963ea98eb3f2fce54bf9d11e0caec29e7ea4c13f569094eb2730a7ecb9ff148fa347df8b605c3caa731ec370ac202c4c4776e379cc1868046299ee52b4e18f365c77890cc8ad759a13cf629a16e801ad261f5fadefcd8f15661dc807fef5abec57fa5d71031b0abf83bc6912b56c94d7f4458060e179cc12bf6e54ccd643bf61d5f422a", @ANYRES16=r18, @ANYBLOB="000826bd7000ffdbdf2501000000160001002e2f6367726f75702e6e65742f73797a31000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r18, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x22}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20044010) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="000428bd7000fbdbdf2508000000140005000000000000000000000000000004000500000000000000020800040000000000140006000000000000000000000000000000b997c91d318050f922912959bf81d1049381ed85c02746b765783451544b6c309152a90707bf191ace793e9c7aa6fe51e76af3ca8460496cec19484369d03c31f50f72132974f8bbde4c3e1178178f74715af36900f1633a2d10b20d79be3f61811c5f881d09907431115bfb181d03f81e2718ee6572f17db2db5e78f0"], 0x4c}}, 0x4000040) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x48, r18, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @empty}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008095}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r18, 0xa4cb15c0085330d5, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x29}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004090) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r18, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xd3\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="5a0f79bdbc000361885a23542df3a7f9"}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x54}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x5}, 0x1, 0x0, 0x0, 0x4002811}, 0x0) [ 2181.847001] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc1f, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:00 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000280)=0xea) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, 0x0, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) timer_create(0x6, &(0x7f0000000100)={0x0, 0x36, 0x0, @tid=r5}, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:00 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:00 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r5, &(0x7f0000002000)=@ethernet, 0x10) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163eeb40b700000080000000000000fd792bbf0e5bf5ff1b0816f303000000010000000000000049740000000000000406ad8e5ecc326d3a09ffc2c654af00"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r5, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r7}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000240)={0x980000, 0x81, 0x4642, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b090c, 0x2e6, [], @p_u32=&(0x7f0000000100)=0x9}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000740)={{0x7, 0x2, 0x434, 0x2, '\x00', 0x2}, 0x1, [0xfffffffffffff82d, 0x3, 0x8000, 0xc2, 0xffffffff, 0x10001, 0x1, 0xd240, 0x3, 0x7, 0x4, 0x2, 0xc4, 0x0, 0x2, 0x1, 0x723dbfb6, 0xce, 0x431, 0xffffffffffffff81, 0x7fffffff, 0x401, 0xa8c5, 0x5, 0x4, 0x6, 0x8, 0x100000001, 0x7, 0x9, 0xffff, 0x4, 0xffffffffffffff81, 0x4, 0xe437, 0x1, 0x7, 0x3f, 0x100, 0x80, 0x20, 0x0, 0x3e, 0x1, 0x3ff, 0xda, 0x2, 0x1f, 0x0, 0xffffffffffffff80, 0xfa6, 0x3, 0x480000000000, 0x100000001, 0xfff, 0x3, 0x4, 0x4, 0x3, 0x9, 0x1, 0x20, 0x19b, 0x14b000000000000, 0x7, 0x3, 0x56368000000000, 0x2dd, 0x8001, 0x2, 0xd26, 0x100000001, 0x5, 0x1, 0x6, 0x0, 0x7, 0x9e, 0x76, 0x3ff, 0xffff, 0x5, 0x3, 0xea, 0x0, 0xfff, 0x1, 0xf9, 0x0, 0x101, 0x4, 0x80000001, 0x8, 0x4000000006, 0x596d, 0x2, 0xcc, 0x4, 0x5, 0xfffffffffffffffd, 0x5, 0x3, 0xfffffffffffffff8, 0x8, 0x1, 0x0, 0x10001, 0x200, 0x7, 0x8, 0x100000000, 0x3, 0x6, 0x9, 0x0, 0x4, 0xc2ad, 0x2, 0x107a4d4b, 0x3, 0x0, 0x48000000000000, 0xffffffffffffffff, 0xffffffff, 0xfff, 0x4, 0x5, 0x2613]}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @random="51bb34893cdc"}, 0x10) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="c1d4696c", @ANYRES16=r9, @ANYBLOB="00022abd7000fedbdf25010000000000000002410000001400136574683a6d6163766c616e3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r10, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r10, &(0x7f00000017c0), 0x375, 0x0) ioctl$VT_WAITACTIVE(r10, 0x5607) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$kcm(0x10, 0x2, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, r13, 0x1, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xb4, r13, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x72b9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x13c5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xefb}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYBLOB="0252b233cb45969d9abd507279f54415309dbcf00bde46f8852eca36e672d46448ee6a73fe3868239ea7", @ANYBLOB="df650f9eb7e6a4b4587cd39a3730267615237dde6725c2f29d4b37f87b25ceff0e97"], 0x5}}, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r14, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) r15 = socket$netlink(0x10, 0x3, 0x0) ioctl(r15, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") preadv(r15, &(0x7f0000001140), 0x1000000000000230, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r14, 0xc1105511, &(0x7f0000000c80)={{0x2, 0x1, 0x4, 0x3, '\x00', 0x20}, 0x2, 0x400, 0x0, 0x0, 0x1, 0x3, 'syz1\x00', &(0x7f0000000c40)=['TIPC\x00'], 0x5, [], [0x8, 0x3, 0x6, 0x8000]}) 13:46:00 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x1, "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", 0x80, 0x87, 0x7, 0x5, 0x6b, 0x9, 0x0, 0x1}, r5}}, 0x128) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000140)={{0x81, 0x2}, {0x3, 0x2}, 0x1ff, 0x4, 0x1f}) tkill(r0, 0x1000000000015) [ 2182.620343] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x6c]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:01 executing program 4: r0 = getpid() read(0xffffffffffffffff, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000280)={0xa0000001}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) getsockname(r3, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x80) tkill(r0, 0x1000000000015) 13:46:01 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x44, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r11, 0x31905e13403123b7, 0x0, 0x0, {0x7, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, r11, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008480}, 0x0) r12 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x7c, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x6f89}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000280)={r13, 0x1, 0x7, 0xdb, 0x0, 0xffff, 0x101, 0x101, {r14, @in6={{0xa, 0x4e24, 0x81, @mcast1, 0xa4e}}, 0x9, 0x4, 0x7, 0xaae}}, &(0x7f0000000100)=0xb0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05000000b2b24fe7173331f5000000000000", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x5}}, 0x8090) r15 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r15, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r15, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r15, 0x40305652, &(0x7f0000000040)={0xffff, 0x4, 0x7, 0x31, 0x1f, 0x32ccc1a1}) 13:46:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc20, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x2}}}}}, 0x76) 13:46:01 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2183.260594] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc21, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000140)="5f60c615cbdb9d0323903f0c4e71737542761e4350de5dae9bd37048dbf498503d77917361b7c2fe089514694a5c956ea955f8686a9e6dbee3b3dcdfca4534fbf8b15f6f915b553a906abaa93a60a2ca7e903bb12979c0608dd158abe640db824679aebcd8eded59d41ff96dcd68af3e", &(0x7f0000000280)="0830fa23d2aa3979e962fae7337293cada30a1c07764b6ee53c36dfdce3ae9af9274fd5bdd4610091b11ba2ead905eec333a7852e67c73a225fd5e17051e66a1aab6bb1bd803f3785da7247dca07c1a1710d7889754ec80a857a261fc0677f60e3f4a6ec27df1094169a29a7eb144d43da418af1e8e98f8bca6468b691ac8a5564dbb0a8fbcba2631173ad5bead12cce9a22258a08af1a3270621428aca5250da94709266e38299ac142580311759eba97c5d7c57b14d41a4e3be6fdde1f48fe03d20060498269b28cae7c21d3fa3cc2c2fa047be0a30be75ab4d76423085ed693073aee00249b58bc37d53a9fe9d2b4"}}, &(0x7f00000001c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 13:46:01 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000000)={0x31, 0xe2, 0x1}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:46:01 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:01 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:46:01 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x38, 0x4, @thr={&(0x7f0000000480)="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", &(0x7f0000000380)="a2e0b49c6fb8c67695e8c124266c97e35f58b9619324ef860777614d01b6a5cec387d5ebd9ca1d2fb24901e5b7e1ae4bb89c4f3384743f3a3b464b43011c924cb3fb082b8e55e1e9133ac2e7a0da64136ec24aac063b0cef3f15d6ba26a2cebe7c1773935b879b8bb5329f5fd3ca93c24ecdf39f38d2fdf33f2c76aadeede970372165f49baa69df86a870af95a2cdf27b08ee3cd6f85823f3c1954874359ed5b3871ddf2ee556442b2e36d486210e8ec1bc10426b09817ddeb30a05aa1211ddd49dca76"}}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2183.961557] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:02 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:02 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x800015) 13:46:02 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x900c0, 0x0) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000500)={@remote={[], 0x1}, 0x6, 'bridge_slave_1\x00'}) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x80, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f00000006c0)={0x800, 0x1, 0x2, 0x4}) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000380), &(0x7f0000000440)=0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r9, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x2, {0x6, 0x3, "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", 0x3d, 0x30, 0x9, 0x1f, 0x5, 0x8, 0x0, 0x1}, r9}}, 0x128) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="bbbcbd4600087b80fb517390c8630af38fef72918b688fac2a87fe2628bf09d2e62c49392bb90aa7b3e59f6d7ef22a0e229a6b84123892cc34e8b0e043fb51bcae7489f6448b788f10d102f75767ad686288566e19ff432bfeaf8aebdd00d7d279234739806b13e5bb7c9ce96375584b9e58df2bec48fe7b4aed9e316e5ad36836cce88a0f35903f6ccace21f75779bf8fc13576d2c441cd7b20977a3b85", @ANYRES16=r2, @ANYBLOB="050280000000000000d2010000000800034799849250d90093769c9785704788c467176dbd4ad74eb9d8df09dd3d0084be40deffaa5f9c40ebda23203d3a465888530be4925d54a5672163", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:46:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc22, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x3}}}}}, 0x76) [ 2184.796508] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:03 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3ed9, @bcast, @rose={'rose', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc23, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:03 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0x7, 0xfffc}, 0x90) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="8520164653ff56117633ed60c14c1e8bfa1280383e7b1fa22051c072b63c27d62fedd8adad87ac0436869fe5b29b52f5875316a2ce17380761b0efbe8200a660332f0a16aa23cc00c7e3a0886e9a99d835a453a5dc428439bc121cd39361729f3d73d78e0164f27cb5cf1633f5feca090b7407038dc034a850d87e1786e918dccba7d2218a73ec17c1416cb1", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX]], @ANYBLOB="1df3735ffecf8571d183fda70dc9293401ea181e324c4de00b8482dbde010000000000000083a6913d970f2a44444874fea3035f959ca6402263368b2d2c776db4d9425ad0d31437e266d96ba5892da5ccfc3f49e81f0249bd1ccc313d446c6b446a842f3b941082818a4d22c6447a53d965350b775967054b87fb6448aa263b49789b3878d543893d78e4644bbbb7f32ad5ffc0acf51cb090251b12a837a6db6cbabad4b6f155d3ae4b97d3ec43640000000000000000", @ANYBLOB="df650f9eb7"], 0x5}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x10000, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000200)=0x9, 0x4) 13:46:03 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/29, 0x1d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x80045301, &(0x7f0000000000)={{0xfc, 0x6}, 0x1, 0x0, 0xffffffff, {0x1}, 0x0, 0xfffffffb}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:03 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000000)) 13:46:03 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x80045301, &(0x7f0000000000)={{0xfc}, 0x1, 0x0, 0x0, {0x80, 0x4}, 0x0, 0xd10a}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2185.930959] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x2]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:04 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000006c0)={0x0, 0x4, 0x4, 0x2, 0x3, {r4, r5/1000+10000}, {0x4, 0x1, 0x1, 0x1, 0x92, 0x3f, "a65bc666"}, 0x9, 0x2, @fd, 0x2, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x80000000, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r6, 0x0) semget$private(0x0, 0x3, 0x541) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x0, [{}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfc}]}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x8010) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) pipe(&(0x7f0000000380)) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r10, @ANYBLOB="107000fddbdf25020000000800020002000000440004800500030001000000050003000200000005000300050000000500030005000000050003000600000005000300060000000500030002000000050003000600000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100027bd7000fddbdf250400dd46f2c92dd0424800002c000c8004000b8056dbee7ce14d5c0f0a18082933ff34fdfe6a8c3208000a009d3c000008000a00649b0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 13:46:04 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000000c0)) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r5, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x71, 0x0, 0xfffffffffffffe99) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r9, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r9, &(0x7f00000017c0), 0x375, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000340), 0x4) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@multicast2}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000600)=0x11e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a01000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000002016300074031f89bdca392603f50a1ed101ffd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d663db8e40586b1f5662aee4bd65cd6d638fb43ba9ac5f8aa73e92e8b753823b530878e33ab1013ba8c185d9ce64475aa345b51d2964f37b726efc28fe61dd854e5ae5f5cd1d1edccfcc79429ef0cb73e1ed663c44ffb330480"], 0x18c}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) ioctl(r15, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x240448d5}, 0x4040065) r16 = socket$netlink(0x10, 0x3, 0x0) ioctl(r16, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="200002bd7000fedbdf251700001cd84d9b0500264c466ada0d0e0008000300", @ANYRES32=r17, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 13:46:04 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc24, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x4}}}}}, 0x76) 13:46:04 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x1) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2187.003706] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:05 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{0x0, 0xc1}}) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000000c0)=""/6) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000140)=0x8) r5 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=['system:vboxnet1posix_acl_access{user\x00'], 0x25}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) tkill(r0, 0x1000000000015) 13:46:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc25, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:05 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:05 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000008c0)={0x200000000bd, @tick, 0x0, {}, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r5, &(0x7f0000000740)=""/204, 0xfd17) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r7, r8, 0x0, r8}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r9, 0x81}) write$P9_RGETATTR(r5, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r6, r8, 0x0, 0x7, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0x2, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) r10 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) shmctl$IPC_SET(r10, 0x1, &(0x7f0000000840)={{0x0, r2, r8, 0x0, r3}, 0xb8fb, 0x0, 0x4, 0x8000, 0x0, r4, 0x81}) ptrace(0x4208, r4) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x6, 0x5}, 0x0, 0x0, &(0x7f0000000480)={0x5, 0x0, 0xfffff801, 0x200}, &(0x7f00000004c0)=0x428, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x5}}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r12, &(0x7f00000000c0), &(0x7f0000000140)=0x1c) clock_adjtime(0x0, &(0x7f0000000340)={0x8, 0x7, 0x1, 0x5, 0x2, 0x403, 0x80, 0xe37, 0xd46, 0x5, 0x8, 0x6, 0x7, 0x9, 0x3903, 0x6, 0x3, 0xffffffffffffff81, 0x8, 0x4, 0x7, 0x3ff, 0x6, 0x3, 0x2, 0x9e4f}) r13 = dup(r11) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000280)={0x10001, 0x0, 0x0, 'queue0\x00', 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:05 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8045) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = socket(0x10, 0x80002, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0xb4002, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e7ab00c4ebbe43adff970a12c6077d0c26020ea6e016d1d44d5a8a069fa4f42c0adffa9d7981e32ce8f39668e2ecd62d8b35318ffa120674b92a584f532d512685a7fdddebd31557cc04bea1c4f9f9ce7c1ab97af8dffc6305e8554a9de4a8547c92eb29ac28ab96aba23135af6995c3e4c6", 0x72, 0x8050, &(0x7f0000000340)={0xa, 0x4e21, 0x9e, @empty, 0x200}, 0x1c) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000001040)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r7, @ANYBLOB="08002cbd7000ffdbdf250100000014000200fe800000000000000000000000000000000000000007616d5f736c9876655f300000000014000200fe88000000000000000000000000000114000600697036746e6c3000000000000000000014004300543e704a684336893f62030a27151f0108000400e000000114000200fe8000000000000000000000000023aa2800070073797374656d5f753a6f626aff63745f723a6d6f7573655f6465766963655f743a733000"], 0xbc}, 0x1, 0x0, 0x0, 0x40480c4}, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="ff0700f2b7"], 0x5}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) [ 2188.163497] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x3]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:06 executing program 4: r0 = getpid() stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r1, r2, 0x0, r2}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r3, 0x81}) getpgid(r3) r4 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r4, &(0x7f0000000200)=""/18, 0x33c) r5 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000380)=0x3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r7, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r7, 0xf}}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:06 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}}, 0x0) 13:46:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc26, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x5}}}}}, 0x76) 13:46:06 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2188.509999] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc27, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:06 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {0x0, 0x4}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r4, 0x4040ae75, &(0x7f0000000140)={0x4, 0x1, 0x7, 0x100}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:06 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = timerfd_create(0x0, 0x40000) sendfile(r1, r2, &(0x7f00000002c0)=0x3, 0x10001) r3 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e21, @rand_addr=0x4}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e23, @empty}, 'hsr0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x840) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082bbd7000fedbdf250200000008000200020000000800020002000000080002000200000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x20004020) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r5, 0x8, 0x70bd2c, 0x7fffffff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x30, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x14, 0x11}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x7acbf2f40781cf8f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r11, @ANYBLOB="df650f9e0b"], 0x1c}}, 0x0) 13:46:07 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, r7, 0x0, r7}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r8, 0x81}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000140)={0x1}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000280)={{0x5, 0x2, 0x4, 0x6, 'syz1\x00', 0x9}, 0x2, 0x400, 0x6, r8, 0x1, 0x4, 'syz1\x00', &(0x7f00000000c0)=['$/cpuset\x00'], 0x9, [], [0xffff, 0x5, 0x8, 0xff]}) 13:46:07 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x1, @ipv4={[], [], @multicast1}, 0x9}}, 0x8, 0x7, 0x1ff, 0x81, 0x4, 0x7, 0x8}, &(0x7f00000000c0)=0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={r5, 0x4}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:07 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2189.583610] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x4]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:08 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) setxattr$security_capability(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='security.capability\x00', &(0x7f0000000640)=@v3={0x3000000, [{0x5f2, 0xff}, {0x4, 0x7c7}], r2}, 0x18, 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x602100, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x6040040}, 0xc, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a30000dc3c4a9cfd00e60d132d491356af4121348f2894c261a74eb44e76c9b0c1a46f38535439d013fe121b80c8135d1716cbc9085dad53c06b7325d66a9c0d387e0b5830781bf6eaf9044dbdb8cfddeca11fe957f30d3eaeceb994d2e58437f41d20f17a0d634ebf5e6aaf30c70688815ffcdf31d4588a34af0eb66f4bb9ee5e6640760be8cc60958ca108ae5304158f6194edc5377dedddfd", @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf250b00000008000600000000003c00028014000100fe8000000000000000000000000000aa06000f000600000006000f000300000014000100ff010000000000000000000000000001080004000002000034000380050008003f000000060007004e2000000800030002000000060004003f000000060007004e2100000500080005000000"], 0x94}}, 0x8001) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+'}, 0x16, 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") read(r6, &(0x7f0000000740)=""/222, 0xde) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0ce5f000000204b7084edf685658cb275a9ae8399a1c5af17274514"}, 0x8, 0x0, 0x9}) preadv(r7, &(0x7f00000017c0), 0x375, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x2) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) connect$vsock_stream(r9, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:08 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES64=r3, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], @ANYPTR64=&(0x7f0000001c00)=ANY=[@ANYBLOB="d9fd509afc15e2ad8a30ffeb871e6c3add7dc208c442d511cf7e38c80dff9c7f01695f75da2d6fce2e6de8674003024a27a3d9394905c19a39b2a20266999979901f0240035ba34fb0f5be2695938e760eb69c51e0e34fff1a537d97c2b9b1d55342a02ac54d41e79604e16ddf5c8b064ec1215b2d5ca031d6c592fc49113334a7cdae85c78973731830d5f85f7b6199bbe0689eefe3dc229dc5a1a8d6e3ddb494d57f706075752db80a649456a9e5f9d311d467f13ab8", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYBLOB="fdb066604ad4a399f56ab4dec6c32c5b3a179ea51f747110522a4632d2a43b6270355d0bc8485093c5d894cf06471cff8c959369fffd79e01d49fb7fe652f895835ba2f47ce2", @ANYBLOB="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"]], 0x5}}, 0x8840) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) sched_getparam(r7, &(0x7f0000000000)) 13:46:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc28, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x6}}}}}, 0x76) [ 2190.067796] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:08 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) fcntl$setlease(r1, 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc29, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:08 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:08 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000580)={{0xfc}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) dup2(r4, r5) 13:46:09 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x1, 0x24a000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000540)={0x14}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) sendmsg$AUDIT_SET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x3e9, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x1, r7, 0x9, 0x1, 0xfff, 0x0, 0x8}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4821}, 0x8000) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/uts\x00') pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r9, 0x10, &(0x7f0000000400)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0xda0c5aa9580255df, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x1, 0x52, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @adiantum, 0x0, "87c3615d03a65ec6"}) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r12) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:09 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) rt_sigsuspend(&(0x7f0000000380)={[0x4]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r6, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44054}, 0x22000844) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) ioctl(r7, 0x1000008912, &(0x7f0000000340)='\x00'/11) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="d3583ef9f62e63823275eae510cd781f6572e2e05283c87b62b70d223e85fcf032ae9a255b38b782cd7eb8c3c2999ea18c48fa722fd8bc7256e32a0c", @ANYRES16=r8, @ANYBLOB="00082bbd7000fedbdf250200000008000200020000000800020002000000080002000200000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x20004020) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2a2240, 0x0) 13:46:09 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) pipe(&(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x7b, 0x0, [0x81, 0x4, 0x80000000, 0xffffffff]}) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000140)={0x2c, 0x8, 0xe8, 0x5, 0xdd}) tkill(r0, 0x1000000000015) [ 2191.397056] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x5]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:10 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="9f580f9e6a4abb5f07511567c37a17c580418528ef7c8ac177965b7c913ed3a8b43a4aec3b2e3ae743e5586a41e7bf2fd1d9805428b328486a4d80713787bd588b2db53c45283cef04818f6b26e1cad6a08fa1c015075545ff6bcc05e044b3d4a8edcb2649a3f4f9dfa43560f489aefeb5dd0ed8e7cf98ce173bd50a40ef919bbf1705f14c000000000000"], 0x1c}}, 0x0) 13:46:10 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{r4, r5+10000000}, {0x77359400}}, 0x0) tkill(r0, 0x13) 13:46:10 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc2a, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x7}}}}}, 0x76) [ 2192.165559] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:10 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="807a9b2ce82b3979ce30d47645cc444c71ffa8a51f35f0b2095d14d52b095e4584766f92d75eb68dbbd6b39815287e5c56861b7450840600", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:46:10 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280)="5ac6d00abe75473f620112ed658c63418760c3d53bf5bd6947f1a927f60fc900be3b334baaa8fda65667267fee51e70a972a3d4387da41373b40353a47f6ce88920729f0e11c687f1be140f1c943ad7a7fbe61c7b9713ee1bf881965a0b78204ba63395ae07d022a25ebd43a09a4073e2076a639c262068f8ff346a4b55316085dcae8ddac68807b9d92d828130779f4450fff95ee10e87843829222cb6f81781554092e052ccfb5753ff2c58f24cb342425679755d4fc2608b51205c37c11c13a3b8b28df03844343640d1b7e469ea3b5c846afd2906ee28bae39592688a051005a9a1313", &(0x7f0000000140)="f8a3db17957d3766b52b87a79ad2074eb9e764eaf5c2e5b73daae55e853575befd2f66a7f23b809d742194ac2702213b370605806edb779f634b92784e3c18ed4f43a8465f9a1f4120fd8befcf459b718577aa1b61565de458c770863ecab68793ce4a1c877f37"}}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc2b, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:10 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:46:10 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) socket$xdp(0x2c, 0x3, 0x0) 13:46:10 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @mcast2, 0x90bc}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x5}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x8d0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)="51affe11a680026898f81023a8dbed9adf2e8348477cae41d5eed4307e1af774276a71a0513272e2782b036dc15ce4381b29d24b2ffab5da81a36aae7565da013304fd0d6c15ef39e6372ae3c989f0f4acfd890666cbc1c45f4d827cd5e1909d74e121e435ad2d6d667c6314110b2d885aef9132d4cffb60656d7cfb36d4791a33853ecdffe52d3605877c2683dc", 0x8e) [ 2193.278672] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:11 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:11 executing program 4: r0 = getpid() write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x339cbfb71dfaf986, 0x2, {0x6df0b22f}}, 0xffffffffffffffc4) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:11 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) rt_sigreturn() 13:46:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc2c, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x6]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x9}}}}}, 0x76) 13:46:12 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r3, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x5, 0x2, 0x3000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) [ 2193.917353] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc2d, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:12 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x101000) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x0, @tick=0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="20040000f403000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/1056], 0x420}}, 0x0) write(r2, &(0x7f00000008c0)="3d099e381980cf3a32c4fa542514be1ae3316a7a5ebc8fced90ca8cda6198b2331feb6fbbe4f75090c8e0303502e1f58b305d9aaadb5bfb599a786ad32066b86c7d3456ad4b196305d86f27ae4fe8cefef8bb41dd981c852ea16dabfa2039d1f02492a47d017b6b2ba279b44c9f351d47bc7afbcceccb5bdd801efc898c31af42149945638417f67dbdba4426895684fff734829846c18e37c5d189b6a325703a151573a0c57564c8bc151d3839636de5b7d78c6c943177c9c56227cb855a23d6d5128b14cba2d270a134d46d1890651c38bc873562f58fa73c82a0fca94bc9a29e659fed232864c3c7e0fbfa31ef9e47efbcf106d4eb80cbad0b9564eae7e733815332773fbae7a4fd6e9c1ea498f16622a02261b4d642b7bec4f33ff2ea93e2c4b3e4c2f2f53ce39360233da995fd20a9f63c91525b21e8408e17ba2ac00af7fd1fedcbecf904ab0fd997c971c7f2a1f3521cd17a9784ade07ad028748e096ca560e69e7304e4626bfdbae659b9680d61b45535f4f307eceba99f0761557f8f1ee8bce846748929f96a955dad3d52d93b0d553fc5591219d0466c43ec97e34a2a3c8837b4fc1842c88bfac2424d20566397cd3417a38d985bef0586a4a8d997b6f343ccdee6d3ea1c85ead361f0e59d170a50bdfc1672c38bed8afa94115630431e8e10e517958176945589e47db3cbadf00657992d6907860d38266cc6986e5ca3fc2f6952f5e649c57892123b38f0ec9711aa8d458a72a6fc027ed45fe98b76c71d0033f6ed3b4730a062a455d8ec7b5c299b5f365f8f5ed126f3233a424171d85fab4e54bdb0cc457f67860bb49fd7f81a04b89d65fb7374899d19b4dbd34be6d3b4de6e4aa0ed95cd2164562c3c735d16d2676fe2853cf8c81c8f1bec77e8c1703a2d5583d0dd1beea1e966d0bfdca983883431de1392543db5b455a9c00d81baa049285efa7907e4bc3cbb96ec057c0a10543a2ac9b064862afc244d44e90804cebf82df3002002b94cbb1f09612a2c020882ac46409191f771511330a365c6de4d5f294207dc004044129015d64c5b6c4e2735f5b63005af8af64a7c8e12190dbcd0df6151ca3457199daac4045d9108060d11cbb487190fdec46021e1377bbdd5d5fc62bb78b691b1f497c12380e0c7005b39e29bdf83d49ae7e0877421b394cc3b40a17604acb58d2c17221fe62ef3486cf105abc61aa5a4f7d3f45e30a7f59cfa032535a0f833e360b2afe736e58888b2125f965e0c5b01c0848f0f0681009c7944385e5503661a27c3c866e2552c2855f3dd46ee4d60961f45eddcfca75608148dcddfd3a1daf7db7079d222a632537ddc64f754920593a36184c4cec1a7d2548ac96b76b5aefd45421af093e3e09c1b76fbad9a1178cea3b410f7ecf9b06a50144bdce9e76bcb467fa7e078b9c233df80c6466ea13f0ac34632b89ed0d6bb0fab617e76dc29d45dfbb1b50ae55a87f5a9641f42239ea2a737253438995ef7734cb29413344f2fed1d329186435b7f3c013420932760d3c7579bf30c62ee1979b4514ce138221c75239b6675862c27a2ccb9024a871381f7b3fded5fa9248877ca55a2024f3cc85886e2becf4a4fcaf4a22e95f6c8e679e1f9691c5907e8c8f785c7d3a16536a15f4e4b44d2a036f402723a2571c4359abf4bdae6ecdd0a11743000a19de4c6c05268436c5e9df2dfde734504286d72764598a4383f5df4183827eb3d5327a94bf56729b9953be71dd17cdd98f7f77d9fbc0dc1a7079786b5f55983cd6b84300f3cafb2db8f257cf487314e701fc543b125e38080fb22be54b9cf2856c5b9640ac33107897940d6195ebc4668c6d88ceb183149423657d053b5e8aa8521fc6f5ac2b09850603ba2e0a3b98c43250aa5a1421dc097576590bba97f091121d46c7263dc2de74e78b0154f6f6b825191c31867f2b2ad7f8343fd07041d8336a1a1b12bbbb75a7e67af329a437fdcbb122e0029796819398d1f24c6565da64c8879da10a21ceafc20074402d921a75776001e82e6c36cf7676c7234a4e83fd2265262b2e26ac115df2576027adcc6bc4389bd9446c673135339ede304a9e5fc5c50d328f480da1dc8e6a62b98bd494aaf2869cf8576303a96d8616209db339b5e12a4628574a4fd34c0dca8d29f721bcc1b4f55298bae82e52e918254112212fabd1e219fb5a2262d763b301ec67de9ca4d076c48f6d54b20132aa42727bd1d74d6d22e3322dd2517f3ecc9b09644979acb130ed2a8854911a5f2f5ee95762a91d6eb20e9fe39501a99703c70c577b260de2fb99695cbb82434c0c1b1ede15e7b65201318a8bc92da0b39a76b2360a6d54448e851f0f0f4dc5f227e4dd892110b411b1e5b0aee5c950d5b26fb76f1cead5b4131ab96284ceb3a80f8532603df7a9276421d4c39f3248e0f3eeea632c7e5a74915afcfc96a39689d41581cdf15f90ce144760496be621d2d8f129aa0aee3d531cc9210d9e20590dd2cf26b5eaf815087b81ac948d0718bdbd39d2f4cf8d1f8d2f03d6c60810745340ca9743d56e18d6db89895e94c75c50d05c759398f857102b7c6d7f5001a46ae621c5c1aa49215426f96018b11323ee5a782bf1fb59a1493dff0da2974accce8454d7e01c9c7a907c2c1ae37aac6052d24445fb43b6d42fbcea069fa5b0e6e523f64c78b30176ba261c0200f0c8e3e927c0819b4baeb667e525d5adf14632dc02151f1455d163006f980a1512b97bd02dc0a91fd9db6ac8339dff36254ec51b7da2f0c97c53a1fbf1e5f93e4a1fd018aef63d67794a392fa68f4caccbc362196135c72ddd46896d305cd0a4d311a6b02e0c135d8f144fa365aac8f3e24dd87e484edb9e72928bde5d4e97d0dfae94993b74e99c3d4b09fd36d7c87c0af3de3bf7fbcdc01724a33aab45aff813fa77d48afe96f3181e09e21b47f0ba93c8563a911aead5695df589af637a1f4bde7c172462066a6c9cdfce4c8e5c63c22e994a1ef82b55b7dc73f76185494d75d348875bae5bf99cde416ff314e6f311dd8588782356771aff88c649b84439028d14a9f7006e1b0557d1fd7ea58956b2f1fb8e2b9a3c5362991bd95b2743a80f60750f771b89688e0282a3fd9a105eb62d189b2f17280bc8f73a2cc6d3818447ced5d8d27a0a7bff8a46ad856b32b4b09d5bdc23bdd4534f2f9c4a51310b15da6c76fc80237bc19b318b17f24f6bdfe2a903dea4fb95447e3335f1992659bebd43239aedffade87948569ef916a12caf9356a42e7de51793d6726e1f0bab67ae53e4d21ae26efa3e71a94485a832469bba844bfa1ccc8852a8dc1e398b915c90c5ab3f2bbac4f5b396a11242d071083fa4ec4ee64b27e15271a54b5ff912e97aeadc4673e1eceae2d759a2fb485b416dfa369951e2f23167a5b52cf97c737bca6e3e55d4edb6ff6f620fa432b737943ab6e7facbbcc2086426bc08e6dece4a69e6e045f6479c27ad13d249c858c9eaf2dc3f09644efb95f508a30ed0087d9afb267feaef75127bc2ad26f716cd7327353eb3f9cf1ee2bd7d66447cc9976c237da476839ca5492001f597716036defc5c1d4889119f37d192fe31eaaffc647e896e79319f4e0b6f1fd8fb699f885c7efd825e914deeb92a4c1b345874e244fb3c7fabf5aa6bd55e51ccf618ed5bb8672b106d4617d2003c40c7eee9a1664d1568427aa2580d7a4b9c925c41c8f27f83aa7943e37df74937883f750e50daa150a6c44e17c3dfe7553c5c7edc2318652ddd4916d44241b2041f960204e8ab306f4bd5cec187e8e60a4f6197c074ea37074410a8cf70cfc3204d64fbaf17acc68362a6de0c6cc2273e9533f50887334280690320ff4e21ad5404210b43df11a64fce3b638ab7c038887446789613b70b8f7880aef80e45ec3d6b5b6370bf5af675a459d8bb0a3d39f8155f53c32242fe2f257932a22dd8f8bbb91ddef2a8b3deee6cc12cbf949b07c5d425a22f84c04b1a9b91f9a848c759c4665a05b24d110ca43dc36b310b585ab8b492b8c9b3b7970588985bdfa37ecf248dfe175759f87192d3a21cfd6983a39b6dcbdfd1290d363fce7c111f9ded41e87ec283e56812b13cc6ce1421d32befc27feede7e15020750e3fd786c85a8e78b3baeca8dd7de801371b21b31b6a13bf075c8da97ad2af1dc19c011c8ee547138a32b8fc14c0646c7dcef5fc48a45c576b6fe874e7f98b4f6285ef5b45784b379a04a8f44f1aa1cbd6b3559a4d12b1c903b5dc4068c2a53044a04d4c57da9f1a02e296362029722c5fda6e683e5c5355baf6b0f9627e6ef313c9c549477dc359e1ec1684aa1e08d580605cf38f9c9f0a5df9b67a74b72aec1ca9bca80fe8030fcce77247237f26b46411b8ce92d5b332c618d511c8fb03841d2e1cd3a5ffe05d81ef91f72612feb14aa0f2be874fcaec11a257f779e38f4cda01c3b3e9ca1554689afb67fcd9d7bcf9e47adb06da95c61c16a3c236dc481aecf256f52009c562bddb437435059fd33c09ff312c86b07495831c7b7e99035ab33ef083313b6ed7cb864a28bfdfa405a1e947279c658900dcaff6d48c3cb99e14110c2ddcbd37d4db63bfce82920e96bca6676c9844ed9efd61f16a26d66c7f9f682199be6833f2c264d62aca1cc89aeea08c66cbe53a44111b5f9e84c39ae66e696766743a8e582c09b1a2742ee6a51e80aa8b1669f0adac213d9ff8de470e66b37050d5aa71e04c6eaef36b8f1b27d0d2e1672413718b543371d48293371d3d6f0138b3f0988ae77d4fe00777635ec9bab9cd76789e62b2772cc31c55f5f008decb149b17db867eee918183b6d17519edcdbcfd99467396c3bdf3b4018b8175197eff677c76db2bbd72c89347a68bf722a566aaa5b451ace968deafaf76f85dc1c6f9691878f95376f8911a05b23195d40dc71b6c7425b488835db89342a0ec63fa4005708410ed05ee4d56b750860bf5532a609bb95fd2c84aa11ea2071dd5932c30c727bca059e90acfe70ed7a39bc11c3c03d2283a4f500d51fd79398a37f0bd1a4b12f9c576c918745fe83017b56465af0ad092fac8147d989bff7e492b0edbef0361a08bb154158cb99aa91dc2bb4dbd638673749629ae17b510c060c71e1f3942c42d736eeb6991fdf5c096f8acd73f94074652819776b15e756b76278f04004b39d2804fc9fbd6e2242b755164d15bb03b21397f34680638aea3ee1ed695dca501a9135b080ae073dab5ef932de710d51bae3df300cf3ac497ccc3ba14f54a668b0236413de18ef0ad60c1994f804d4933058a9bab6e7274aa528d325888f79131c0ddbfb0f080368f4f3c84663e011b9a36a12791c724299ed23c7861ea733326fd773a163d80a7be764326d4c559b6779b522476648969eb698be28b444e7872a9f3c09978cd30a17fdb747e175980d512d5756d9ea4b018874429c191426c42a56e5d88e2ff2baa963bef927a7434f1009eeda3bf3b6326194986e3540c26967936d86c5379337eabae005485ea1e7c083f8fcd89ee5598db2eff5f124c7a235f725c3239ebe0451b89f6d11a1a693be77fa18c69f4b42a339129c1b4a705221b6ea72e28d49654d574c0003ebaf0168cfd47ccdd8d74aaf8f25e94669b016da696ba42e0d6b227f5967d74e16cc304edb5ad6d00fde3e69e689f65641c6424b983792c2cf128461f6b7aff158590d8a457a17ca3a581c110c5550365a67d9275625e99595b6ccf2ac95f1ec89519e777aa61a2f4ed2f1db7d305ecce2e712e70efc81d087f8e1b1cfe5fef5260baed975e7c44f6306173416b", 0x1000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000140)={0x3, 0x2, {0x2, 0x2, 0x4, 0x0, 0x98e}, 0x8}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) ioctl$SOUND_MIXER_READ_RECSRC(r6, 0x80044dff, &(0x7f00000000c0)) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x8) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x100003) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:12 executing program 0: r0 = socket$inet6(0x10, 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffd7e, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="e243879a090000008344ed9e85e3fe3193ff0032149d8c76df63df75957e41f31d00fefa6ca90100b66ed80c5324868749096fbd00"/64, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="bb327a094d0d624ac0f022c293d82884c8174be3ad4a428bbf8cff255bb995bc86955b558c6e8cf7ee01d70cd7919d9b07fd61ce7093a243bffe9ccc42231bc6c20b15418b5db520fe13537149cb82fdf9570ddb82bae5da72c6da543ce1c0ea7f9de2bb333ccfc3a448f28090c87dd869223ee1e5a3ce94a8f4a9c368a900bacf014118f863994774"], @ANYBLOB="0502803809ffffffff00000a010100000000", @ANYRES64=r2, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:46:12 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000280)={0x5, 0x9ed, 0x1, 'queue1\x00', 0x6}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getpid() tkill(r0, 0x1000000000015) [ 2194.520544] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc2e, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:12 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:12 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0x1f}}, [0x6, 0xf95, 0x3, 0xffffffffffff8000, 0x3, 0x1, 0x20, 0x5, 0x2, 0x5, 0x0, 0x80000001, 0x2, 0x89d, 0x1]}, &(0x7f0000000440)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000580)={r4, 0x3c, &(0x7f0000000600)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x6e23, @rand_addr=0x7a5c}, @in6={0xa, 0x4e24, 0xf7e, @mcast1, 0x95c7}]}, &(0x7f00000005c0)=0x10) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000000c0)={0x0, 0x10001, 0x7, 0x4, 0x1, 0xaab, 0x5f9, 0x46, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000a00)="e026e6438d9227bfaf069da58c2f412887cce11a0a4ce053c005f5c99a223f74fcaf1828f0558a0984a20b5466ae1903910fec4c5a4eca2e257ffc198fe416bcd00407e2e6457cca302b5bd4b5dade13e99693966aa2b66db0c172f42ad84bcc8a021ee81a59b3d6a7edf687bd11b303d7be29d420a60c70e694247ad2cf0a22796bc0108eb287218314f590f66c7588bd66557194d5288d55203b7efd52a3fe8545c82f22907f5ff5cf25b15b247a065aeda09167b8951ffa32b2490d909ae69029dc46ddb4d562308cb11ca47933b2d66ed77effabaa41e7cbe8d78785c425b47a5a7d0072d148c540256d227ba624c01e", &(0x7f00000007c0)="c4579b913d6ac5d1f80f216e89b1367011ee70012ef890226f02a363c25bdea5eb46e81677850951ad291782f803ee029045b1948e695c475f32261f72c978cd7f4f63f02479fc8e2d61"}}, &(0x7f00000001c0)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") pwrite64(r10, &(0x7f00000002c0)="70a5fee76902c90207e02d7a042d4ff4c163de277038a5c1c2d3096e80ab68c95d9ff1cd4b35ea308f09ac26e11f8f30fa814fbbb0420e25300183a0a2e7a67e36fa4b35fb2425d33996589646e08028010ad428b18d82e3a46d8924cc873acd26e3", 0x62, 0x9) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgid(0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x4, &(0x7f0000000280)=0x2, 0x4) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r11, r12, 0x0, r12}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r13, 0x81}) syz_open_procfs(r13, &(0x7f0000000180)='net/tcp\x00') ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:12 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000400)) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1}}, 0x40890) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f00000018c0)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4dd30042632e42e602335a3dc4ef"], 0x18c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES32=0x0], @ANYBLOB="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", @ANYRESHEX=r9], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="2c9af2c178bc30f7458ce8ac9ce189cc838ae587cda6266fd96b3abd36599993fd1e197ff49f400ec99453cea7fcc1cddaa83d4cc9da2ca6e6d1def5c0fb2c632d8da309c311ec142d3610f601f3b228163704800cda7948d9c83506b08a6c75a37453b9c15743711ededb02022d967b761ec2bbefdc97ab93bf8e7db2077bc70ac0dc05685013ab6b28578df9c189c681406cee0e3e62612cf87915150601d75400761b3f89a795f7b81fac7cfbd9397e4647ef595d0db1aab32ce826acab77d31d62fd6dfafab57f7890c48005f51af1d7", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES16=r3], @ANYRES64, @ANYRESOCT=r5, @ANYRES16=r1, @ANYRESHEX=r6, @ANYRES32, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=r7], @ANYRESHEX], @ANYBLOB="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"], 0x5}}, 0xc040800) 13:46:13 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x39b) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = accept4(r2, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000280)=0x80, 0x1800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r5, &(0x7f0000002000)=@ethernet, 0x10) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r5, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r7}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r9, r10, 0x0, r10}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r11, 0x81}) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f00000000c0)=r11) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2195.204443] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x7]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:13 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000006c0)={0x0, 0x4, 0x4, 0x2, 0x3, {r4, r5/1000+10000}, {0x4, 0x1, 0x1, 0x1, 0x92, 0x3f, "a65bc666"}, 0x9, 0x2, @fd, 0x2, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x80000000, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r6, 0x0) semget$private(0x0, 0x3, 0x541) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x0, [{}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfc}]}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x8010) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) pipe(&(0x7f0000000380)) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r10, @ANYBLOB="107000fddbdf25020000000800020002000000440004800500030001000000050003000200000005000300050000000500030005000000050003000600000005000300060000000500030002000000050003000600000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100027bd7000fddbdf250400dd46f2c92dd0424800002c000c8004000b8056dbee7ce14d5c0f0a18082933ff34fdfe6a8c3208000a009d3c000008000a00649b0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 13:46:13 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, r3, 0x0, r3}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r4, 0x81}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f00000008c0)="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", &(0x7f0000000380)="84b8db668bd08335c6950013e2e52b010a8492c0505159d43eceb83c450dbde44eacbf2322cd036b54b659c599019cc5e15837130fd7f2e4b5f3f9bc2634d5e48f1e7dd343b34b53309ce9cf"}}, &(0x7f00000001c0)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc2f, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x11}}}}}, 0x76) [ 2195.466294] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:13 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) uname(&(0x7f0000000280)=""/141) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000540)='TIPC\x00') r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000500)={&(0x7f0000000580), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3c26}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x20008040) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8) tkill(r0, 0x1000000000015) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010401010000000000000000030000010a000200000000a28da5a7397a88e1700a6b9dd140adac0901000000d469e1e84ee591601412959583e2b3058017504bdd7ecead6d86ca0f6419edbef62869632860e79d68409d86d09b36affbc877312df47b2f35a359c9f048a718b2188f272a6e8bb7eb4f62965387ec48ad7fc8ebd874418f602282fdb9fcb553e8186f0018"], 0x20}}, 0x0) [ 2195.605480] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:13 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc30, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:13 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000006c0)={0x0, 0x4, 0x4, 0x2, 0x3, {r4, r5/1000+10000}, {0x4, 0x1, 0x1, 0x1, 0x92, 0x3f, "a65bc666"}, 0x9, 0x2, @fd, 0x2, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x80000000, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r6, 0x0) semget$private(0x0, 0x3, 0x541) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x0, [{}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfc}]}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x8010) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) pipe(&(0x7f0000000380)) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r10, @ANYBLOB="107000fddbdf25020000000800020002000000440004800500030001000000050003000200000005000300050000000500030005000000050003000600000005000300060000000500030002000000050003000600000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100027bd7000fddbdf250400dd46f2c92dd0424800002c000c8004000b8056dbee7ce14d5c0f0a18082933ff34fdfe6a8c3208000a009d3c000008000a00649b0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 13:46:14 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, r5, 0x0, r5}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r6, 0x81}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x800, 0xd2, {r6}, {0xee01}, 0x4b, 0x5}) tkill(r0, 0x1000000000015) 13:46:14 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000006c0)={0x0, 0x4, 0x4, 0x2, 0x3, {r4, r5/1000+10000}, {0x4, 0x1, 0x1, 0x1, 0x92, 0x3f, "a65bc666"}, 0x9, 0x2, @fd, 0x2, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x80000000, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r6, 0x0) semget$private(0x0, 0x3, 0x541) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x7fff, 0x0, [{}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0xfc}]}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x8010) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) pipe(&(0x7f0000000380)) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r10, @ANYBLOB="107000fddbdf25020000000800020002000000440004800500030001000000050003000200000005000300050000000500030005000000050003000600000005000300060000000500030002000000050003000600000008000200"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100027bd7000fddbdf250400dd46f2c92dd0424800002c000c8004000b8056dbee7ce14d5c0f0a18082933ff34fdfe6a8c3208000a009d3c000008000a00649b0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 13:46:14 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x800, 0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000004080)=[{&(0x7f0000000140)={0x27, 0x1, 0x0, 0x1, 0x3, 0x33, "e1997048d89949b54d015ef2567602b1633e3216306405fe22b625988759c39038f4c79f1060870d50b6359dc8763e6b4a55b4e17de55a4b4a4f2519d9b48a", 0x2}, 0x60, &(0x7f0000000640)=[{&(0x7f0000000280)="0fca93250f0d86bb393c5123bc9c2ecf191129c7eecf0dd380ce3534eba823c217c29d4d68b96787998d49c95240a804969cb27ac83b4ad3c51b57366b66c82a1e06b71d6b4dfc2b58efd8f934874c5abfe988e201db04b980c77d4d", 0x5c}, {&(0x7f0000000300)="555b30c47925eceb90d0e084fa3e1ba7018cca5c797dc95859d25ee57367284c5a712b3335f5cf2a9c1d9243d8cb028c38b137576863c1cf839357b5121d4905c4c4eabd09f819e1dddebe97b9ae911a8e8bddbdf523137238fc59a16e8471da28b3fd58fffc3b4924adcc99aafc2bb400a5905adf56a6863ffe72ac9e125d29617e27a5ccc95069e1168bcf81d7088f18b35bdfc562b8d1", 0x98}, {&(0x7f00000003c0)="86cfaf14b59c9f25999eb68ff8a3fa435a25", 0x12}, {&(0x7f0000000400)="f01821c6c4885bae079e913d555e3b58616b5ce77346bcb36528cf25fb95ad8dbfe9e5fd66008a28214b5f5600ec15a77dad6eb81cea98160514becf2235293b6cd21a3a1a84db2c00f3c49a6c6fa688e43e3c4a6cb865d1d08e2479ba2045b4871803bc9eac01f23f8ddc68b462a4b364a3e308d7caf1be1b836a60c1a69bc6e4afa726b2ac3b0b650bfceb76e77368d77fe8ca4ca45153e25d39458e", 0x9d}, {&(0x7f00000004c0)="5ce4ee5fcc11993a1bd50ec40039408d76130bfe06e747e5a9b436641dcf39e94fa06781240f6257ec00d16996e738c3982dffb3a12bc92c1b8f69f83f7f7a54fdfbb40052068fc9d6beb1ee50c71ac0abff32d17be87984ab81d430da67dbfb76b8047e7b", 0x65}, {&(0x7f0000000540)="d03c44f9a72616fdf3671ad22903ba72df6ba490600c83d3dfbb2eed1f680e5cc3c5afdc75b2ca4b5636275147bbb56ba506a5aba14f112e803137abe7e9c84fbaedd0e331d407854b36663f4a280b97653c45e756089d76a1f66704393bc539529ec35865634307cc4ab550255713888bcdd7a5baf40aa94a01565ed11314c58337dba1cc276ec6e5eb67c492ffa8666354e4f61ffe33ce28c008cbcb27a80bd3aadb8745214a75c18da86784b8fc2a0afb5a08021be0421a416f847ccf40a0b8089aaacc461c945b7bd49d76f439ff757f44a9359873", 0xd7}], 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000000000007701000009000000f86be76ca895566a9de1e1a94b88bd28f58f5ab281042343b54c4103ae7311047ab7804c859dd6eef5d3da17a384c2f928d089fa70511743a2be36e4520761fab770d1f0734f9531b47d41e3feb115edb3ff8db44db78d755ab505adcda1cbd66176e16c49fd47f59b3c72f79e6cfc2ac7a6d71336f77a9b459261fee1fededa4bf6ef2a6121c4bfed12f103f1b1471c51b08034d4eb23d791cf9c8756b8b9724869291ad94207fdd6f563da98ff2681496e2ca85a27ef5065c686180c650000"], 0xd0, 0x80}, {&(0x7f00000007c0)={0x27, 0x0, 0x1, 0x7, 0x4, 0x3f, "2422695b50670d014302a18749b2ff9e0b726aba91a9014af15d99d10c68b6deaaf9b8d32d36efe123074784cf92a50241b65956a3de6e57bc5787c40f3c75", 0x34}, 0x60, &(0x7f00000009c0)=[{&(0x7f0000000840)="f53513dd0f6d4c56076dd62d967345a2386325f2fda4", 0x16}, {&(0x7f00000008c0)="57c21d1233e00707b300463aa8af243ee5f8cf3eede3318391d52d84383622e868dc35b17c66d224470d894eb2a88df6ef1cb23a655fb93f262d8218b67eda87daa7c96640ba10ecfe", 0x49}, {&(0x7f0000000940)="b3f011fe3971b85e473919028fd8061b253b7a96c527a2fe1db98e63a05c11b9e308a92539d2dd7baf11fe3e70a9540591e59f0f4559023d280f736a44af496a4b185d4f89f9eb93a21c43156f9e270e360a", 0x52}], 0x3, 0x0, 0x0, 0x4004008}, {&(0x7f0000000a00)={0x27, 0x1, 0x2, 0x7, 0x40, 0x7f, "fdf478abb06ecc6ecb3dccbdb0fd9cbf5b71832089982cdb039350dd2d0d016134873082910c79b46b294cdc85ec90003d05499f0b42ca0b4fc62040bd17ce", 0x26}, 0x60, &(0x7f0000000c80)=[{&(0x7f0000000a80)="e8b2e33d058edcc6d9788a76a059782030df053c59669db41d3960ef77d69e", 0x1f}, {&(0x7f0000000ac0)="d44f7f7cebc2f7c9deea21b268f7b67c8808961d2a99ddadb9471b0ba36e144ac6028542b2b7b39c5df94f06b68f65bb68ddc9eff17a2d50cbc38564c5173d7d02e14f9fc17544d5191c0e29061680673b895f3b54d7ba011f26ed4eb63b9e73cc6ddc1c3d9beaee8554645f671f1e5be2222d681dee9ffda6d100afa585837e0d539bfe9a2be69ac6f2132b10a2b29a738be240cd513fde838f166dac96f22f0d81ac1b2889ca4a3976b8138151e809759762aa2a0241c90687e273297122ac0250765cb19c9431c594ae00fd1d29eae7f7574b92", 0xd5}, {&(0x7f0000000bc0)="9069dc9c17b87cfeeab6cfa28395cf288032621d9492c5eaf499965c32ba353135e1fe6469b5953547bca59a798bebaede76e4ade97c0ffc212b56ec5219586a0e802284d85bf45b066251eee047ab108dc04fce0ceaa9bcf9ea416a3a81f5a17f8e7de0dce3139df28bc531cc262ba9b69de7cd724e65ef2590d83ebc74b0aa34d35b3457882e37e616113ae21e3dfbbb2f13eb", 0x94}], 0x3, &(0x7f0000000cc0)={0x1010, 0x118, 0x7, "289f57f3376e3b44975db9f38fbfecbcb73535a00bb63e6786b679d5d078a795abc43084d565a74480139a2899cf8e67edf7fa5b1df5013e476ad13515131c6d677c8c28b2a85f1f13052380ada0525a0f43e4fecd8da533400214abdf71c9871e705be287ee378cded75fe104585e309f8a924195cd2c06877036cd97fb4180974da12e5b605076e89059f1ceb6dbbfca61bc02f8b992c342481ed922a90d7dbb572b50d6355894e9b12b93f19cb864acd98c724bf99bb172d5b7b1cf27a4d72c26854feef49d8cf9ff791d3114fa7f1820e8f5010dc318da4cf162e6e9608c992d7486cd01233a3fa50dc301b33d8e945685c42c0e05b73f7d343bd3c0cbf642d63bb65aa55a5455e91f1fcd4192572c78a50d829c2aa421604caa6dbc10b7803d9afbb849334148d6563b4a154ec1b1b9ee379a55cce3cee04eefff54d0ad8eda46b096bc69cdac23870fd1ff02a2c1cbdbf348d1044242416d416e4d9df92c0ff38a83500bb287dc00aed7c60b8f79319c6c853989aa17c0172c324336e1c0b6f73ed888fc3a88338c5f5662467af74f612280446ac50e4a3b83f40f7fe246acd5e6731b669413b9a5d076b7dbd3116957286e0020408c40fcbe7af83149ce8976a32bc8f8866841773a469e50240a8f4419e2b4de92268f5babd866453061168452aa97420ad57fe76aeed1983e027dda5d02dcfd4565959160dd5a1d4c0fb7da5e2020690c1a906b15827fd159b692a547a10461543e96545aa1c3e211e5a95982f0953a1c2fe79218d19965c655670a0c491e3959d2201412affbc082940dee46c0c98cb3fadf1a310d3d4f8bdda1c6d7c0240ecdaa18391506cb322b4119be126283159c9ffb34fd015a0a542e62b0ff40c1b7916900b1d1267e5cb654aab571d12d7e09beb1e8b1fcc1ab23d9ba111534dac644a55a69a17273cfadf6837813cbe0637dcb31cae92346698e252baba273194ea696276585413f3ffa436d4cde17a58cfe17eb220116d829d1d360ca0c7158cf7ff79f0f0e36871fe771abbe9f7a322ac6227f812961b3250f921d187d0b3d5a8552f3590914fc4f53952dceb1935a71e7f6912983fd95beca269b2a2657bcd2dce2d1413a3d2657fd7f3ce2933c3e905a53b7b4856e9b42fa31ce9e5a8fb3ae1469204a79023125fef4c9edd70d6d5878ffdfe416c6ed8955d81ad21a54c581cc302e1aeef1d93492621858217c1b7863b6ca37075698235ea3e72641af8c2837fdeca6a1ba11128a91c85d684874030067bf3bfce7743f0e7043e250c79e104ce90ca1e805cd6e3afe1f6ba7d19da772672d6a3ba175169178d177c0e5d023a6be39723936c140969e19b52ef27fcbd58397d53c4c4ccfb82bdfdad218a050a4bf2f1855454cbaea87cb9fa3946e9357b383fe66717c011637d2ce3ee3e4f839105e037539e0966cbc67038c9872d16d3ef8c4cfc1f0cf60bded563db1b39bfd27f34fa47c2fdf8d539c3f56ee4f423a1e590c88d98d4b618cc355c5481ad0b6eaaf638decb4cca311b62049f1d2bd8494508b384a9a6f287cce27efb40bb2bd0e9040c170e339990cb378f23bbed29b5c9c439d6ec232ea24075ff925dd6fb7fa0a24d8ca39aa0908fc6917d7e9a9571f8f05773b1fd768f29cd5a78782ced5217cd2ebf7a7f7d31c5e89a21a54520a2b043eae2554594bdbc5f62bcbdf6a528ba1427007d3a057aa37e4d944fa6cc2a2f236749441166ff84e18f6f0aa1034d63469fcbaa8032463e151abff97aa0e55a8e01416f07093a598e1d37d5ab239b21d2570da4029f89ab0e6991f4762c46adb4726bca26fbb97670977a5e7196894a37d050f00ea13ce0acc6de33eb2b2e84af5657ca600b3ed1ea9b1afbdce3ad92d684310f975bd0d4b63d0f773e1f3366bd9c54111c35fc12a342c874b571078ed5aa0349aed05564b80ba4a25f2a94e38143d572fae603437d9d0ae0d9ab46c9ed780c4c5c0b126079b9b38b638c36eae9093740c34dcd7a657f8cb86fe1278690807a9611ecc32df73e315dffbcdb4059298d881fcd0edee79de689b20823946f32f8759e6bb6334e673464343211cc3a899082a32443ed17993656c3269af4894f185a7cca83856b7606bf3aa78f411315071fab674674532184a10e4931bf790e5e2852b6fb3103fb27025cd1a661c58c6e6f0d2a2ca1170cb6942ee20fddd147ee8fc390ed54d96fcf670bd9c006ae0c952deb916f3a8dce50e34e272e1019f3ab23690877e8cc23d1f421482bed794d9c01210ad8fdb8947b5f0acf25139e112a5d77e80c6c5b6cd9e59b996083cbc1c9004faabf3ac88326ee5221a9d9edc906c37bc02fd748ec71ff148b80e7927b10e10274d757ccce3b6086c2273d23c7c4741b04693f7f049cb890a926304a253a119899b9b59cf27efc89d095ef4c7027c121a098465e1b49c3a367d1f7de461f2b9440bc2c32d0c50b6fa3d2b419c72d2b3333a41a8e8507d0fc451f9b4c0cf105d0fbe440dfd3fe339c9ccf4c7fc28f769cdd2d2f1e74c6c9c1a10975aa5b63a3bd00634aa3c0a92db7859bba88c609a86487cd9aeebb4c6d60590123451a9bffe6b315ded4486a607a593d169679b7256031cf84454db7cb843381ac216b62b23ca35205f604098d17bc79fe3486e1ae90aaa5d7575a98e17b417cd99609db5159316e7d03c5cb5b7c14e398541cc1c7a17c9b5c01a6c7020980b64920458376deaa920a6253d84ee2c22e677bc37aa84cd3498d84dc35698fca38e4c977d8e0aa07270c724779522998280bea4d6ed8f1fe0e61b131a4de271ec4273321f322b724f405e3690c137eea31bf7fda927b36b6b125d5f66c2897a69ecbcd4117f078f0be199a1b3d67c213dbb02bb69302f29419eb8f1121fde077ed28760d5aaf339bbc14bcf4fe78c1f54568a892d1021f6343a1b1d824ed5fc951c6341958bcdcb864e52425121f840b4d8a725d7508ba6a488144eaf7a517f99a502b9d89529ca6b622a5c9eeb604b5e2faba8f83b56927e466012d16566ece1e3f8aa2e5fed8cd4bcce41dfeb7d37b1f4e2184899ee2368647dcc33cd7254c2b81a4f94aad5910b7191a528a052937a0c04cdb68fc7f46936e3e3457f9971eafa7a517c4aba315c10221f03b4028a4edc6f5e3d540c8b67372795c2d04eb8a2be3dda35dbe83a128c6f4d81006ffc0f8a1e049e56ee2d6fc3cf25558109effd1d43a80cb94e00e1e8de40166e2faced3c28381b52304d2203d2e26c3ce10f85415d565d82bacac49b6ee0e0dabce86673998adce7c4fcbe21a2006c8a1e0a3ed13bec7ce6552cb9f868276e39491328d6b8d61448bf080c2f36a3c060e64a3a68997636345f4aebb1855431e9431d7360a22bb04162fb9d5c4977c93b0670e3b8d462e3330b5dc728826ba4acdebfa78a705845b5a76a6683a78307b5f00d4ae6468bd74605208055a804733a7205252c20b5c1eaaef2894fc66d21e0e38aae3c22baf8d95afd15c997237c17fb6110cd42e86b6654658fd285cbae1a681957e83c0d1353e823723774844a7a929df2280009f7b0f3b1f0d2a7dcbea2987a61a18e773b0b40974e15e90caa44ae2bd674da7b5390868399b936a297ae6bd23b39d3a6c726f3a2bdea274a778ed6638f43e63443eda19ab1e0af882dc24ca82adaa5b8bc0859143d1c5732c1a379c12635cfe4133052c13f1657cee9f7b4b3ffe4abc9551bd7cae9a5d0ea7a3c8223053c2402a7655da1e8a3a398730ff1c2effac077d5a47b1ebde92c995f565a5bc76e420273042a4097e34505b97aa873db0bcb05e413812eb8b9c6f9a4fff6a4e6f10b1ddb63eda9a895a3577fc4b90caa27e5f84aeab41954b4ac6558822c42ba59e51af54e6cd84375db6889e203dd440878714859f329215d1365b72b521a0e390084a601765087f004a751bcce55560c7794b4cd41fe238177cf7c10351287656e45070200a9ce31f92e8c44b5982550c557c50dc2e394bcd939569a38b9aeab9810fbd4b15adae57fea1bc6477822cd1e1b0f2c28b427202d31889dbf5b3349de440faa35c9d80c42acb4cb9276df69dedb9d623133aa1e576e3d18a4a1ef281dc61c8668f9cdbc883c275b4c0765629281856230223c568483732ff8573589859d5e9aa03a3f5fe998247d60992c025abfe9c931e338000ab43e038dd04a94e1df4da31b8d5def5c86598b49300c7f6842523badd85b2dead541c3e22d6d4c53963aade652769e2b76a05ff310fb8ebcc84e01ac3300c5e0801467a1aa67b561bd27efc359adc9e11b1ba7399d0055c5d7cbac21f7a62ff577e2c4c2f38176c1397f62bfca4eeaee99b05f9be44fa920671f61ff16736555754587a5c666683931bd1a7352b61a888853bfb490a1eab8ab63e3f724924e69ca65ae633aa022d615cb02de1886cefcecd3211820fdc2c119504f4283dfc119edf162f769eab9e4316b24e6caede0c0ef1ca9eadfdbc2cee4ed0f2826e3f50600cbfebfdc4b4b96d66e26fce102ecdeb246c0d82231da4241a6b8afde569692aa3b9d3f86cffbe76def3b8a70f990cff4acf3b68db5f55e37fa256d05332dd9d6c3dcaf4f6c308110a7b0dc957cfec65de53285d2282ec3283ab6cba33ba2388accfbbaba7e3e902fcc7841431646ca9afbbddb7db532ba45d0a81e7b1273c2861a114c1f8f0c73a03bb855ca8d4a87743c9cd06c1b676f0c23337c147efa4f471cdda2553d35c416b68b3a438b4ecdde584864eacededa818ab14494b0c97f3fb4a6d9c2caa16f5eadda347e1496f6ba873303b94618b78be20d01029afe9e79fc09349f866c07c91c51f910b5d9efa532a7fb1db9b010aa3f2e077a87c71917895562998a74d3c9b89e69030b63e021c61276e1a96967a60396da2302301d674f051c0c6c101f51ebdb8187eb99434776ce131ef0aed784d0216f358f51fe0c0d5094a5b5d2bc7abd631f3bc1bc6901320fe314b1ffb20672d7d219ec00823a8ddd8aba5cadcc22c3dbf10a03243b5c072d95e6bdd8fd7af8fe5b7a4421fb099d888d2511971208e8ec367b6a6ffa1c116441589ef74ec5dbe991b0f8781fc8371fca3eb96efda9b90a85f3b3aa71f0a60fed9de4fafd121762bf3b086bcfe246f9f3cca0309c01714d0af15e91e59ae7ed43d9188f793a0bcfd2daae0a0ed87f49278430085136eea2d74fed88984fd998ed8349a6d4262b1c676c760a4f352dd76d6186f3e1cec5b280bd940f4f6dd63de50484422036acb0c2fc51752e45cf2a4c1704807e33a9e2af61f2ff1cf088672619ce2e296fa12d5f6148048634aa6e37fed7d4df42a9b6ec5c154f401bb5f830706883b7a989e6890331c8bc34fff1ec2e6048d6212d6fb9d505cbb2c8fa6600bc949eee72da72ba47a096cf76f947b364e2a446edb5836f550b1316a7fc5415431a70cf0d2d56f16aa84446bef8c0b3ae892008f675b87f0dafbed505fabcf1f36c7d97386085aec196eb343dec61ca6bdb752aca8a59a6d681d306ca9f2177a8fe5b756daa8fc91d652017ffac330cd2e68b30b5f360996025357e4a7550b643ec9f15756a6bb6564a3dd0b42d7bed2bb90ebc8ab1655ff3bb44e9a77d92c23c3f60746b7f09473087144f0414af00b0a6f3a1cd11e02fd7924730b578d3e4932fbc0b6040aae44960917819fabc06ac86d6f746c19b3e153a38aab8dba58bf1aee77f1e71b03073232f67ca711892bbe53b4c6f48f3e9956611e9834775d29597c8efd9b80893bb06223202ce16726dccb4f0da4d5cf9a5e1"}, 0x1010, 0x44}, {&(0x7f0000001d00)={0x27, 0x1, 0x2, 0x6, 0x5, 0x3f, "ae3c267ace48d16b0e31f862e285764da0389f5a145190b2e5d1483c6b81478744d9ef23c9e6d4eaf77cdca3522d46894011635e59e00a338c603d2964ee8c", 0x2a}, 0x60, &(0x7f0000003f80)=[{&(0x7f0000001d80)="feb6693f8e70b1e949ce7ff05e6900bb2e76c41a19d225b720d4ed71a0685f8a262fa0705e636cdc62e5b98afba5c26caf36f15789183f202dac9de3bbdde2a020afffa058", 0x45}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="0a15aaa1abc6d29ccff99b99084413af8e8c3e2e87cd324642f4d39a68dd9846dfe3d0195f1d16634e2d9335e4dc1d9ecf77a35f10de4b8c027646eb3d3dd72fc78eb9035472b92979a4e8cb8934656a1b34b97c950946eea5bf4068ecb18d94b5c13b5e15d16a4ac6354a48b149e75859a7e91b3448b54d1ded73270b46e092da479d8992f475f30b", 0x89}, {&(0x7f0000002ec0)="9c9d8192b0217742085d31fe46df52d116ecd63e857e0a32f21f3a0bb3a66d8325df13a895426a7c560a30f6c30796f1", 0x30}, {&(0x7f0000002f00)="48375327bcee4fc3360b4a96d64d94ed4a4c21c1d34bcb50648d5c6b2b5953f7c4abcd6dbe8ba7191cd871a524f620c2a6fd5ca162fe78c1a4c273571e0fc520b20716e9c2ea5c62f33da888e6ba7e07367c3f01454f5a4894b5a9145617ffcc145f0b91f84e7680add200bd", 0x6c}, {&(0x7f0000002f80)="25b717d7375e79018e0b7e766e4358dbe86564e26db9fa5d9cca1657f6bbe3349fd3508e8aa7dbd7d7bde76b20f5072e1852fa713105b32fd60429f211300c9e8980b8041370f28c0500a79d377a3b24302b5761561327f723b79163d23d5b7d080067be364f617727a2c8924c28cb9d4e237a10de85ea408fd3d1a3a7f2046e5d67bb32b7e86ce330a5d92b665325780dcd7516571d50eb667b932e31441d0fc763d563494f62463fca8513d4f4e67faea09ad875c5eae693c9a2b8b762eeb53ad16538123c3f64647eadb91d77af5dce9c5a51f9b9a884a67b36998a1c60f438ed7e52cf8521066fbe84bcd39bfd0a3a253933c36a706b5a059723102aa4f5e519fe34ea2e03d5504a5c9571b4dad0dce9d43c4a72097ed5502f1aab177641aa9685eb19e73e61d939dfdb1c3f34a3bea9e8fa30356dae73a7b7830528391bdda7df389fb9d2e57618f9fd8c790da5e46863891d738e09f0542e3ad31c5759c200a2fbc066f27284252ed74f107a32acd08e20c18bc11aa0a047b15dd55d31086957348d748e302f3593120b93a492021328f691cdb9d72df6da2373179c0cd166755e318c660538846906553d8afda2a1ab72eddc43d73a4a3f6044709168125ec1111a7e221be4d9a9f48ace4fc4f4bf50706b055c797017251a3c4257c30664dec4cd4fc4d97b6a83cc8b282fcc3d6f40a50fbed5e43d7b081b932030ea558647fb060e36c1cfe762034f697e9cb990e66bf276d61df229bc01ba68d59c76d945769f49eaca2297c48639badd97f4b1ac6fad0444a15416e267c2d7bd3cda3be8ea407f90b6432850cbd91c27062f3db27131ee2f53934918b6919acb335cfc409ae796741c146fca9d7e2bf83fbe27e210b4bac38e3c9a7d259332441905fc5e18c89d6298d7870c67a66504768402db893940a364345928a44217312d12bb173c678459bfd8d594129eae3ccd3728c7cb7259838abdcae83c43b0ba93fd0a60e1c14f536b7a02dc8b89100de08b8d6fa09605bfb2efb57c50e68e3cad2baff10759d7e88c1f49428b6e62bb64917b7a36e21d3a2b550e99b410a938f63012d28af4710414afc38edd0f7aa0df8aef5fbcc0f1f4c98b71a01a663d1fb86e1fc8f9a832da3a9b9fe2da7969c6a338d02a3e2f47ce914659314ea399af158472047cf4cf0ab45fd9d3b503bfe1f861136eac55b0eaeabcda4c61f67d110d1f2e719da034c3809eefdf8a6b6b6aa71c31388b0cf1154a6d448975b4f56ca3d64412fcf8f31c9cc71c769a64c8d603c3eef78e4e364cd5408e0a1190df80e21d633b7a420c26197d2e56b41e4fbc1696764534b0f58d49130710682ff507fecdda23883164cb08afeba2374cbee367638c2b216c8369f30cc1b33a61e641164ae3c1fd142535eee883c788e48a213fc054a683d413af1683fa6cb6a20a6e8ccb06daabc2492272afbe14eef19ba6da98dc85c06638493e5fef23d34da1e2b23e4c007a3ae20dd8a334652ae8b5021377be9033fe05ac4a51c0ba1f1cd12dcc071795f88df42149fcc926bd76d366ec84c518143bcab4482f68f566d634a9377fa90f75ba8b72bad21edd9bca7419cb9d059a64147651b5a95af199f34008e18161a7d7d4f7bc38e131cbc330928c615583b3c0003c9471b3aa8438712204b03eacd8370edeec8ffd9159e42eb7e5b020cfd56c69725fba6296e4e84fe9831912d6112ccb2412a2b9dda48e932835c625b0ebd843f5f308a22d10356a91d7e964c2a5f3bfce1c417b1829599f655cc518256cfb3db78a6a4710280a9f15b833fbd8910d072ed288eb180d0b65ded7a6b593d14d0445d3df3d98fa589fac2fa4e5f8bd470fbaa4c3413c7aade35b826e3fadec977ffa94fd8e20854cb925632ec369c6ea0be791cb94944c2881d835be48814d7815c81f7658957e3766afc996ff574f0d863fdf640bbd4505e077133426df65cf67ae55fd2c733943d9ea2d88eb66ff4297eeb0ed558b346a03b9e340b2aca0d71fa2890291137f6e5ce0a710d359ffa8900bf0f34a876088f7531b66c4ad582de8f9c9a86a4af250623fc405de916d75a12cf2fdaa41205053ba919f4a4b621d1ee06f80e64253598300cb0b0a38ace3cb5f92bb2519c875fe40959bd75b50f3290ba45cd0852ab9391f47792953a0ae0764d007989ec546595b2c4eaa400d41039478e58ffb803c006cdda580d91b03b2d04d83cbdfd0471782139330101a2aca78aeb085f476dc932471cd5101aa00bcb5e87c8156a969d7da64238369ec9bfdbbfd15c6004bee33ef6501c4222d0fc2383bcf356d846fd30d8a62728417b646cf7e3e532f9193a7c32a51802759a0b27587f932919d22f9dcfda5467c99fe47433902ae10aa513b3085eb5848a42ecb40ec86ccb8d1f641c2cc2cd5ec6e3a7245531f5c40ed37bca18a9a0fd32212b95ab39cc748e5bcc47c0b620a78f681ebf3e29c589bda14915c9c1301f1223615da1850b1b10684eb0f61208ebef9ac1f5fd04665a952399702f0d347b0935ed2159ba1ed2a6a58711fd06849fec00921671e339d7d861430dd743f25bb6dd966153731c2348a1465353303556cb15ef8a5d9f0b1db153ad9ee6c7755d503d9f9e6ba29c9ae4d1541f0ea8af3befce8b8461f308da960487f8f0e60fc1477f4c9cf43e82ed30cb0cd0b951b9595703254951878672fc5231b02b16f5a30cb2770ea93bf7acedc75ee2a326aff6dbfd99a4773151ab7de56475c0ac00f0c66a5e5d90fcd97fa392c2a71eecd6ca5c0baf6eab7441c4aef37a50b59cb8325f9f47a51a95fdda145ceaed0d5b17975a38ac10e58df0f008bbfa6f204f7c80abb8e709ce038288c06decd749d4ec0a1c842d99fdcaa64312062649320357a8e668ab710531bcdc5314a8cb269b5809fde7b589bbd06ebdf7acc983624aefab77361361364c974becedacfc27cbf8a88d98bb9d5961d74168e0d1430413d3c014f7cbe8b61fe0a7950137a6e8a44d3a6c82ce59d428aaff3688735896913de946d044d894eb8ce52efbaa4acdeb8a00a557a8842b5d3e4ae100c1cabb116f4b1992203a218e3583777dca62f95e17f745a95a01f9a19b4f1aa709a60f7846baa6e7b8f83c4f46bc321b531ac808d29fba76360e2efd5cee2e96c1b8f73b3f09ab482f231b9ecb1a0bac2452f6ecb509bdb3fc4f990fc8e6e35ec92d82256d9d31655ff49088a71ac23859ba4984a73620802d1a99e8f48d3dd420e5360f59664cf9382c625a9623528622530bff621e8c8d9cf0b2faf5bbafceeec174d7889a3b297d60b37854ed19c3f48a3982f26f0395f5519b0bd644fd35f366bd57db1acbeef65d22648cf7a9a7a1d7550d0fc36ae6fdc8ed1c7a85cb3e8166b42d1f466059b41813e30b4194cd9a605f1b3129e9e8e6b6cbcec365567209719eb04740de3bc90bf7378086ec375424faf0682a60f92c8dc93cabf6d7251cb12a6ebb7824e537c5a4863c80106ec6084eaeb42689326c2aeb4519dcc0ba1453f0c7da2a1f07133a4cb1da9da92b778b1ab084961cc09180aaa201c77c3d6c5f69ec8fb1bc24c2957b90bcb6be32416c44221c498adb19d725f22424f036ae2a664a756d908eddce177368982ff08b3fd21cd9a571fc67e390a41f4516dcd6d7efc421b1bdd422b786a0d51a089abbec1c9c6ee2c2d74a62feb4685da9143314c9a6139e17fa9fb3652d8496b2da1d4d3ba951f7aef988e427c8a79efddfe0d3eaacb5e63c066802fa99e8dd9a7409b7f21c371d3e25d36ff872a102fe6e40fcab4eb6a8600d5a2d03531ab042f36e213d8758c4e989c9126dde88e967cd7a5838deb08d222ce1d29db9d431081edbf5656799180af34f0bfe5f85730883c76ca98c97faf6de0af106783a38d86af4d24f8ad87f81b78b3e877b0ccb9e6af6229c89fb9e283cfab31ee025893546a055bd81d3d56b1636bc4706dfc75db7e840e48aecc32143c346166cbe56305341762348ea3fe3d69d0cbb7451873ef1a9827b112674ed911f73725bce2ae14b2fddc4a4cdef75aa13cbb75f97c868d1b83e018a29a04822dbdaeb95cf3a85f2de7c9970ec441e450539ac59bab27ad3cf434c950faee0e725eb4ebdfc0a252022ecc34cbb3263c9071b0df05588ac89357e8f8aa66246bb9686e84d5fcac6e2e88a8f9dadca3e555ee528d9a807e6366a2b79189224b3dfe6fb86fad632810994cf6538a22b642fe5ceef183faf6f8975901284be0961bf1b52fef9911a40a2f42687dab671d3ed94c6bfc9ed80bad1dc938296dba6ab4ac3827607f1e8f2f28fe11304b45c9754cac3efbad6fcbe4207cac468fa08caa2dbdb428386e03623b026ff98a175f59d6ebe9b20497f1044a7424e0d62f936f700d9ce9601fab2a67cc432ffa733457f11ca2584234a684d9a99ba54667a14484f9f5c7406460aaa4e0c602dd3b47b51f9f1cd1fcabf71341d34c71eee7cc2fc132cad04f1dab2f603a160163a719b58cab68f5df302d6fc0812b0f50e791696809dcbd30a6e235865520afe7d6949811e853b50aaf8defa07b230a33bc5b4de08b402bd705ae1f37395c4db00311e3cc40ec42e89d40261ed7f7c1b1ede21cc22e068c7e5da13694177ac4991ec2f451f03c5affc8f78819f9f654e73168f2e0a9829ca7a207418f31a1adb6bb530746d31610ee169b66d5ac8cfd381d6897927687dc3ebef1b8a476d326d8104fc09beca2ac7f69f73fd9059b38793a844008e7526c56911da1516f6cd167ce4b0c2359854cb51a065a8c9195e3e9ddf70403220ba4b0d588108a3481b9e39d1904b0496a62c3b63fde2fb22875ce0f4f83ea8006e8b65fb02b2ba407da14ec2535008de910e8c20cc6c787eb2868b2812badc3d125d88d45e06c9ccc77ee484133a5247ed539b633fdb9676ec349eb58c156c0a2b0a9b30fbad7691231ce74a1aca17a51dbd7feb2eb146c03ad479f118342802bcb028aef4355eb0cc275d82a738e720d0be50825358e7d10242bbd8a7c5cc0751257ac372611c2f3d0318b16bde133371c1d26066de447c22bcf02f85176fe42c373172734b3ccff161fee6067f481670ad635b78811a59e1e066f2b4075cbdb3cbe24732781418346a096785d8d74e4f144613e3b6a8998da8bd183f8444bba056b454a2f599ec1e029b25243b0421eb9137bbaa98d367b11596f4746c16571a3d1c7197be19eacb38c2d68266ed3330a7fa864fba04f84de0aa75c95439c764a2f94ed73920bb7e69c9d0a73484f1b13597e121f89084112df8f8cc62c9bebbf3a9a61d8de806a4bfe90a1786173919e5ba0c7518e23db01189ba463df6c4aa1f9822e12262a6d675561549e2fab760bfc30faafc580fa5ca90742927c6a303db1c83dac8aaf2df7fabf569b64b07580c1e49cd7a234cc268d8dd9f749225e0f21cc453ea74194732fe0e6c49162412b61b33e450caa8eb104020b2295fa0ee567786c4ba08c6a383dc9637d31b225db05b6ac8d2078966b77088958070f118c934ca3ce6d0b374f95ded8c9cb5b5ba91c06ab1fdbe69cf9fe914ae4b9371e5d7705345e1f605d5321a930e2336411f10cc906f2817cd725ed106d710dc13f8a9c9d49b66b0d21ecac56b37fefc9e82c6536ee7a0527eea0c393a10e9653f3cce9e18e9d540bc224aff8933d0f96fdaf767a78908a06f5385a4d148bf9675b48fd0ccbf3f696feefed3dd0a5f0c97c33630548f69a1253d619d78c016100d04e994110674b91f8e9a4eb3ae8b7fb4069f4e5c6f613f97276e3", 0x1000}], 0x6, &(0x7f0000004000)={0x58, 0x1, 0x2, "b5659b9b2f3a7b719bfe350dd3b75aaaabeedc1241632845bd2d44b650f79330196d048a2f759995a206f4ed8cadfac9b1b095f6c746c03da6c47d873cddbd4f13"}, 0x58, 0x4000}], 0x4, 0x373a8c3ece219544) [ 2197.023392] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x9]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:15 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000180)=0x80) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:15 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x55f0, 0x8, 0x4, 0x40, 0xfffffffe, {}, {0x1, 0x2, 0x81, 0x81, 0x7, 0x4c, "7ca3e5e0"}, 0x9, 0x4, @offset=0x8, 0x800, 0x0, 0xffffffffffffffff}) write$FUSE_GETXATTR(r3, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x2}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050280000000000000f20100000008000300", @ANYRES32=r4, @ANYBLOB="df650f9eb7"], 0x1c}}, 0x0) 13:46:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc31, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x6c}}}}}, 0x76) 13:46:15 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2197.487486] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:15 executing program 0 (fault-call:4 fault-nth:0): r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc32, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:15 executing program 4: r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="a4df077f609ef67fc0b22743c9a0e79ff56926b868597a971cfecd13afb3385dfa5872c3e068bdc3a83783b8e919324e53d704926de0b45c86efc6cf193d5cef95b6542f51de68ace17d05", 0x4b}, {&(0x7f0000000340)="2f0876adc27fa650040ada6946fc934b3084709a73be25f68ea630c166d6b197022a37b273910768dd3ef8eb9cd7b897a8b36516feabc8c6b94ad40fddaba37518cb21b8d5257e7c2657c36e8b450b67afb1a3cad716b2133bfd7a42092076559c873cbd17e81b8080a964cebe334ec5550286a9a1769db1bcd364d2fdff6f35", 0x80}, {&(0x7f00000003c0)="2f9ab4792fc20bfab4538ad50e44afb070716122805d558f0abb58aba3d51db1db4645254d63750fab26f3f5", 0x2c}, {&(0x7f0000000400)="9f2323230171e2a06345a11c6ab140958076e6e72b2ceefd8b924fb770a2faa261d63eb740827aed9347c3590025d7a25312bfb3680b990e2fffd3af6391cece77301f8bf9da5fe37b5a2acee0d2e94626e96276fcefd8328448d27cd17e5f8524cf452af9c47df089dc4a011d7bb8ea03dcd5a05275d1d1687a15686fcc2179971075da38c38f1bff1e9fd14eeccbd05b17ad75f932ae7702fb09c39de6f280a43761eeb3444fb65361e25cd1f84640", 0xb0}, {&(0x7f00000004c0)="5b3864dec6667daa5d6fce2f982816dd4c7ea8677ba3b665657fe7d2cec3a8f628161d3140b2029064f126eecbfd5e600e33a19bb15738577ac9c9220058", 0x3e}, {&(0x7f0000000500)="634dcc8cb1a484db5114c354051255369af74fca18f505779e35529911cfefed0a9441c4046c906b6731bc08e4e481f6133e7d89349b2e6bd1f84a78f40257c44872de908129edf0c3e18d07bc7c01c4eb59caa94fdf0bc2e6d6aca0f90fbf34536143fadbeda6f285e31d8e262d69c315f36e98e4ab8c9c1cb81d54ee4b88ae83735c99ee57eff9b456d9b343759fb50810387a09ec32ff81a11a74509ca3e2bbed1f150bc6edb80fabdb6187af46ff5362df90f50758b844cdee68", 0xbc}, {&(0x7f00000005c0)="083fb74f2a209a5e76a7027db6da4aba6452c60a0f87cc545bf472f9664b9ca8e5b45ce760663f8d1efd289b38e5c254bfeed068055090ad34d90af20f83d384df8a59f85f20e27d63e1797ac6cb2fcc91d09f4b46cebac5fa30ed9bff121dfb71b71ba1b398d728533cf338d942b3458c9fc767a597016c00a0b925e8377f98fb25d649783e8725047a16a7fae865647a45a5c76e9a3c82999498fe3ee303c127124fcfda5476d20046a0864cc41d33c1a53502a63f", 0xb6}, {&(0x7f0000000680)="a4c5799d040d1594ef03f0f92b3463fc", 0x10}], 0x8, &(0x7f00000008c0)=[{0xf8, 0x111, 0x3, "b2b0f01f8cf82cc6032808c1a21f687adc9b96904f7091a470289cbd1bd19b703694ce8af9f1014aea2643ee2b9463d8c7832a36a35213387391afccbca7d8066a9b7cf260ec8092afea0dd9249873899d34c32715eb9077c177e1a84377e77e0611dc0ac9f8f75092374df29d476a0159534b1bcc8a9647e5c13723da104cc1023f4e5c27b952c2098b04f6ae65b1c4781835c86086c315f0697a191e964469fe3ca73b0fc1fb8139db5baad00719a827655e268f852247988ecb9cc188a1b09602efcd9d16ffb0c822c7c8113179121e18d3ad57ed0451393a5c1f6219e8cf59"}, {0x50, 0x110, 0x6, "55e6fa0613d0e8724160cd5d82850329d36c8d25945aa034f4898f4f8183f24b3b108ee219cfa273d1ac94b5a8c7c814618c4b6e48859e826c3df069a064"}, {0xb8, 0x84, 0xa4, "87182fb3ad3b375cc4790f6564a0e254f8415ec02114232856962ff66450d2cb1430f63265f31d129ea160bc9db665428a3c2d1aa332cec85982ad6bbe2087e62a80a697918aafd12d3d715a1298180a35b8fdfded00ef730530e71f79e751d9de949c7d6eddcb01bded7e18d40ca7c1c7d160bed51ed6007efd83f71c3ad0d748a7bdd5f8ca2b12d557aa555c3f68189e08f5cb7719259420a8842efae3694863e12f7d59f36713"}], 0x200}, 0x800) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0x0, 0x81, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a6d, 0x81, [], @p_u32=&(0x7f00000000c0)=0x7fff}}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000280)={0x3, r2}) r3 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:15 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:15 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0xe6, 0x401) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000002c0)={0x40000000, 0x0, 0xff, 0x2, 0x98db, 0x401}) 13:46:16 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x10040, 0x0) getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f0000000140)=""/87, &(0x7f0000000280)=0x57) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x404c534a, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x8}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2198.140880] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:16 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000140)={0xc, {0x6, 0xfffffff8, 0x4592, 0xea}, {0xda1, 0x4a4, 0x5, 0x3}, {0x6, 0x1f}}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0xa40, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'gre0\x00'}, 0x18) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000280)=0x7fff, 0x4) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'L-', 0x7}, 0x16, 0x0) tkill(r0, 0x1000000000015) 13:46:16 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000140)={0xf7, 0xff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = dup2(0xffffffffffffffff, r4) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000000c0)) 13:46:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc33, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:16 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2198.911360] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x300}}}}}, 0x76) 13:46:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x11]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:17 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {}, 0x9, 0x0, 0x3}) prctl$PR_SET_UNALIGN(0x6, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x56, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc34, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:17 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x3, &(0x7f0000000100)={0x0, 0x1c, 0x1, @thr={&(0x7f0000000300)="a561008ddb57fa8a975e6139ead91adb7ea9c67c7d2f024c10eec0149035080f9726d8f82c901aa9ef0de99bd7bbb47bcd55755abfa58eb096aa186ede1b1f3e0789a5c1b33d44dc021e3a4e3f4bc0df821e89e47d2990b8bc6e64550506f5b418ee8f116fca501eaddd068634bc9303", &(0x7f00000000c0)="a7d0d29acfb1f300299d66b428a33cb386757eaf0200"/38}}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000380)={{0x4, @addr=0x9}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) tkill(r0, 0x1000000000015) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000180)) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000280)={0x1000, 0x18, [0x5, 0x3f, 0x5, 0x0, 0x1, 0x7]}) 13:46:17 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x80}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x2800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000002c0)={0x7, 0x1, 0x1, 'queue1\x00', 0x4}) r5 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x18) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:17 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) write$cgroup_int(r2, &(0x7f0000000140)=0x5eb8, 0x12) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000000c0)={0x1, 0x401, 0xeb65, 0x1, 0x16, "10687bad392de3b8fcb7ab305fd9d461efbf39"}) 13:46:17 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{r4, r5+30000000}}, 0x0) tkill(r0, 0x1000000000015) 13:46:17 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x1, @addr=0x2}, 0x8, 0x7, 0xfff}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000340)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x1c, r6, 0x21, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x894) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000300000000fedbdf250100000008000300", @ANYRES32=r5, @ANYBLOB="da34807251cbe18ddaeb0d5d5ef32b206cd61f076db0908b8e"], 0x1c}, 0x1, 0x0, 0x0, 0x400c881}, 0x4000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r8, &(0x7f0000002000)=@ethernet, 0x10) r9 = socket(0x11, 0x800000003, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r8, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r11}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100010000000000000000000600000000000000"], 0x48}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480)='NLBL_CIPSOv4\x00') sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="48010000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4800}, 0x40008) [ 2199.665210] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:17 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc35, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:17 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x7fffffff) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2200.566732] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x500}}}}}, 0x76) 13:46:18 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) fstat(0xffffffffffffffff, &(0x7f0000001b80)) r2 = getpgid(0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:18 executing program 4: r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x501e02, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x4, @rand_addr="6ba4d29c932f0cacd770165a140aad95", 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x101}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @local}], 0x98) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x1, {0x0, 0x10}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) uname(&(0x7f00000004c0)=""/213) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x1a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4c9], 0x10000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) getcwd(&(0x7f0000000140)=""/110, 0x6e) tkill(r0, 0x1000000000015) 13:46:18 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc36, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x60]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2200.961835] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc37, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:19 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x181002, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000079d62e6f5696ef2674efbedffccd0f7e56f1689020dec94421136bb983d333fc5d6ba3222bce962e", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r6, 0x0, 0x30}, &(0x7f0000000180)=0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r7 = dup(0xffffffffffffffff) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000002c0)={0x7, 0x0, 0x0, r8}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:19 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ptrace$setsig(0x4203, r0, 0x3, &(0x7f0000000140)={0x0, 0xfffffff7, 0x6}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x4, 0x70bd2a, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) r6 = accept4$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r9, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="20010000", @ANYRES16=r9, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0xc004840) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x100000000) tkill(r0, 0x1000000000015) 13:46:19 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00082bbd7000fcdbdf0901000000000000000b809517334160c22596250a3322c3b1d000000014001462"], 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:19 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665003c1b570c000500080005"], 0x3}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) splice(r2, 0x0, r3, 0x0, 0xe80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:19 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x0, @time={0x34d, 0x3}, 0x0, {}, 0x3}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x406d}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2201.773095] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x600}}}}}, 0x76) 13:46:20 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x60080, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick=0x806, 0x0, {0x0, 0x80}, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @thr={&(0x7f0000000380)="c7000000c13cc3460200000096397f890e8930ef91b5ec4ce86bc34ce7629ad8a5f33ce01a284a39b968f4d921b9195301a6c249b981092b40f425d599c23c03c2f5d8b4c20a2f9c2602a00bf6f6ada5b69e2c25cc7f4e38896dc092f2e702d666e6f5db49633976e582997f71542fc905a235327713e3d01f27164bd0aa8d8a56413364f156e8c3066330e68a39eb09258ab092d1c43a3c1d6d4cffe87f82546d1e3f41b12f2c9a2a23a66a8533ce0f741085edd74c58124c5cc3c0329f", &(0x7f0000000280)="ad3415011abac30ec0784b1cbe097a9e2de254e3fac57cd10b35a7749b726e17554d727185897d8167359f76aaea91f6094fcec58a89864d3f10b15cd1ce42aa380710ce2f8355ebc457f2f041c5c7644536c3f08a3bfd147ef413a0c45122736858fd07989aabd5f8523fd209456c23682e1a571e83641f7ac9849bc6bdf49a9d12e6823dc1269ffd6842ac30b7226ccd889212a81ee62608e38c4803f11f53b3c8d2b24f4585ef46203703b44fca2735b4c8089a273e78df45adde3b1343a5903c31a13a0a8d071b9319045d46ba102d2f70dc4e365e0aca8cd38a81273c8d1490d6a3145e2ed3af4657489b8232e043a645"}}, &(0x7f0000000180)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:20 executing program 0: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/18, 0x33c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x200000000bd, @time={0x10001, 0x7fffffff}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x404c534a, &(0x7f0000000000)={{}, 0x0, 0x0, 0x7, {0x70}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_FP_MODE(0x2e) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x1, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000180)={0x7, "b139044e8d4f2abe8028a02530a5cccf21ce9d6ebb2d41a0265800754ccc2ae5", 0x2, 0x1}) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x4) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) tkill(r7, 0x40000018) 13:46:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x30000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:20 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x6c]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2202.721526] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x34000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:20 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = semget$private(0x0, 0x7, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000040)=""/44) semtimedop(r2, &(0x7f00000000c0)=[{0x4, 0x1, 0x1000}, {0x3, 0x1000, 0x800}], 0x2, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:20 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet_dccp_buf(r4, 0x21, 0x8e, &(0x7f0000000280)="a6faa17dd19f5ab8db58b0aba87ed2c11bf5d5c18092b9526fd8fee482e722e335c4678e4c9798154021ab0c2c70ced7d42c32c0864cbec909c4c48a35810cc68b6f7fdd952b79d201772e688157afd835a71c99cf785f275ef6d5e5c1716159d4b9c1e622fe829e87d91e1f9adc5c14105caa72f959ae6eade9252be397cb65d7a356362c7b1ce413ad43f56990dd", 0x8f) 13:46:21 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1407, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008030}, 0x800) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)={{0x0, 0x20}, 0x0, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:21 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x20400) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x101, @time={0x7, 0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280)="c18f977ef97d7a25874abcbe2d7cf4d1fe151cff1571337c90f0a969d1f22f013d1242393fd2c212eddd2bf55594db879396f3b07ed699fffa300008ce8fe3ae21c80df097c9df8d9f9c50ece15ee320c9a2b9cab944fe6b32f56e8061c7afce9469c3b80c97408b843af12aa5482a53ee674bb5804be39b672250351fc7ab", &(0x7f0000000300)="605d65029639996d35de299410d9bfdc297c5882404b2cc8ea6bdae9579b0d9490942ddd7a7705e4d07ab015cb77ba343cb0b44d71e85fa2ce2bb7e94e06ce8d47b50b5711f956437c354bb951d60660a776a363e62c6a205f7ca751b366575a"}}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r7, &(0x7f0000000080)=""/196, 0x20000144) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, 0x0, r9, 0x0, r9}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r10, 0x81}) write$P9_RGETATTR(r7, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r8, r9, 0x0, 0x7, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0x2, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f0000000440)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r15, &(0x7f0000000080)=""/196, 0x20000144) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000009c0)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r17, r18, 0x0, r18}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r19, 0x81}) write$P9_RGETATTR(r15, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r16, r18, 0x0, 0x7, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0x2, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="08020000feffffff06000000000000000500000000000000000000000000000002000000000000002d1200000000000005000000fe07000002000000000000000000000001000000090000000000000094ca000000000000008000000000000009000000000000000500000007000000810000000800000003000000", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="5e00000008000000000000000100000000000000ff0f0000000000000e000000010000806d696d655f747970657070703021000004000000000000000100000000000000090000000000000000000000000100000004000000000000000600000000000000030000000000000003000000000000001f0000000000000000800000000000001b010000010000008c120000070000004000"/160, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="6e0a0000faffffff000000000000000000000000060000000000000007000000fffffeff2d766d6e657431000200000000000000010000000000000007000000000000000000000000000000000000ffd20500000100000000000000090000000000000005000000000000000000000000000000400000000000000059000000000000000300000068020000070000000000000081000000", @ANYRES32=r14, @ANYRES32=r18, @ANYBLOB="445e000001000100000000000000000000000000010001000000000012000000ff7f0000a26367726f757021766d6e65743165746831000000000000"], 0x208) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x103100) 13:46:21 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, r7, 0x0, r7}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r8, 0x81}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000280)={0x9, 0x42, {r0}, {0xee00}, 0x5, 0xb7}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r10, &(0x7f0000000080)=""/196, 0x20000144) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000300)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r12, r13, 0x0, r13}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r14, 0x81}) write$P9_RGETATTR(r10, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r11, r13, 0x0, 0x0, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, r6, r4, r9, r13, 0x0, 0x4}, 0x2b8fe, 0x4, 0x1, 0x8000, 0x0, r5, 0x81}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r15, r16, 0x0, r16}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r17, 0x81}) r18 = socket$netlink(0x10, 0x3, 0x0) ioctl(r18, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_SIOCGPGRP(r18, 0x8904, &(0x7f00000000c0)) tkill(r0, 0x14) [ 2203.464322] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x700}}}}}, 0x76) 13:46:22 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x40000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:22 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000280)={0xfffffff9, 0x0, [], {0x0, @bt={0xd1, 0xf2, 0x1, 0x6, 0x5, 0x40, 0x4, 0x9, 0x1f, 0x1ff, 0x1, 0x1, 0x6, 0x3, 0xa, 0x0, {0x1, 0xd9}, 0x7}}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x1) 13:46:22 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x9, 0x3}, 0x0, {0x1}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x2, 0x7, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getpeername(r4, &(0x7f0000000140)=@pppol2tpv3, &(0x7f00000000c0)=0x80) [ 2204.413759] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1fffff, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:22 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0xf3b4, 0x1, 0x4, 0x80000000, 0x3d168cca, {}, {0x1, 0x0, 0x4, 0x0, 0x7, 0x9, "4e6f2aac"}, 0x5, 0x3, @fd=r2, 0x200, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x1f, 0xf2}, 0x0, 0xfff, 0x7, {0x4}, 0x3, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:22 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/7, 0x7) open(&(0x7f0000000380)='./file0\x00', 0x20000, 0x20) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {}, 0x0, 0x0, 0x1}) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000002c0)={0x9c0000, 0x4, 0x9, r5, 0x0, &(0x7f0000000280)={0x990a64, 0x9, [], @p_u32=&(0x7f0000000180)=0x5}}) write$P9_RLERRORu(r6, &(0x7f0000000300)={0x1f, 0x7, 0x1, {{0x12, 'eth0}em1em1system}'}, 0xfffffff8}}, 0x1f) fsetxattr$security_capability(r1, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x7, 0xfff}]}, 0xc, 0x1) tkill(r0, 0x1000000000015) 13:46:22 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000002c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x4, 0x0, 0x80000001}) 13:46:23 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_procfs(r0, &(0x7f00000000c0)='mounts\x00') r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r5, &(0x7f0000002000)=@ethernet, 0x10) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r5, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r7}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB="000000000e00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000f0000000600000000000000"], 0x48}}, 0x0) r8 = getuid() r9 = epoll_create(0xfff) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r10, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r10, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f0000000180)=0x6, 0x4) ioctl(r9, 0x1, &(0x7f0000000380)="aae01ce903dd66447122e4f44a4e63b3f88d7f047200117d9444e95a66ff28c35bbf0acb9c579016b4e96a512bf0fe944fb28b38aaef393d561d084e091f8896b3ebad3fdcce60031f00304479f954bf893601396b93c13d01ad8260bcd9b4039690b33f8abdd0c987416fcaf48d80b3de39ec542ea48379152d0a92fca8719b456d684674866d946f17353d60b1e5b948af3cd45cb2d7e603") setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in=@loopback, 0x4e22, 0x8, 0x4e20, 0x9, 0xa, 0x0, 0x0, 0x89, r7, r8}, {0x4, 0xffffffff8ab46e7b, 0x3, 0x6, 0x0, 0x4a9a, 0x200, 0x3d}, {0x7, 0x6, 0x4, 0x6}, 0x24, 0x6e6bbb, 0x0, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3503, 0x0, 0x2, 0x9, 0x39a, 0x6258, 0x1}}, 0xe8) [ 2205.112124] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:23 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="68880c0fea02000000240000062c3d70588f26ba48f3e425e3", @ANYRES32=r4, @ANYBLOB="e0fff3ff09000b00000000002c0008801c000100208caa2a0600000001000000ffffffffffff0000030000000a000200040005000080000008000d004000000008000e00000001000600050004010000"], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x880) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e22, 0x1, @empty, 0x9e}, {0xa, 0x4e21, 0x80, @remote, 0x1}, 0x2, [0x5, 0x5, 0x5, 0x8001, 0x1ff, 0x1f, 0xffffffe0, 0x101]}, 0x5c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) 13:46:23 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x200000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x900}}}}}, 0x76) 13:46:23 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xc081, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 13:46:23 executing program 4 (fault-call:4 fault-nth:0): r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2205.952451] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x400300, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:24 executing program 0: r0 = getpid() r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x5, 0x1f, 0x5, 0x1, "ad0fda61008deced2b752fc7068495e06d1e3c0a1ce59578a3ebad585265f1ac"}) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:24 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2206.664553] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:24 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:24 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x320, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x860}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40bff97f}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa3c}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xddc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7b9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}]}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x40}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x76, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, [], 0x37}, 0xf9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff8001, @loopback, 0x96}}}}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbd71}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x45}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20000001}, 0x30000881) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:24 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x36}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:25 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) connect$nfc_llcp(r2, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x6, 0x6, 0x89, "5d60580abfffc9fdb9e449619698a7d972c0541563966a735c3e837f870f86b777b5213dd4462311ab79dfba9f7322625bead0da824c0a84d1598969382b05", 0x1e}, 0x60) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$TIOCSBRK(r5, 0x5427) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2207.602626] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xe80}}}}}, 0x76) 13:46:25 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(r0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000280)={{0x1, 0x4, 0x80, 0x6, 'syz0\x00', 0x3ff}, 0x4, 0x2, 0x7808, r7, 0x1, 0xcc2, 'syz0\x00', &(0x7f00000000c0)=['proc%posix_acl_access(\x00'], 0x17, [], [0x3f, 0x0, 0x1, 0x8]}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x400) tkill(r0, 0x1000000000015) 13:46:25 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") tee(r4, r5, 0x0, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f0000000580), 0x0, 0x0) r7 = accept4$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c, 0x800) readahead(r7, 0x9d, 0x9) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r10, r11, 0x0, r11}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r12, 0x81}) ptrace$getenv(0x4201, r12, 0x10001, &(0x7f0000000540)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=r0}, &(0x7f0000000200)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r14 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r14, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r14, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r14, 0xc2604111, &(0x7f00000002c0)={0x1f, [[0x7fff, 0x64, 0x79b, 0x8, 0x1509, 0x10000000, 0x0, 0x1], [0x200, 0x3, 0x200, 0x20, 0x80000000, 0x4, 0x6, 0xfffffffb], [0x9, 0x0, 0xffff, 0x80000001, 0x7f, 0x2c, 0x427, 0x1d50]], [], [{0x2, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x20, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xf2b, 0x1, 0x1}, {0x480000, 0xff, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x81f8, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x800, 0x9, 0x0, 0x0, 0x1}, {0x80, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x1}, {0x129, 0x7fffffff, 0x1, 0x1, 0x1}, {0x3, 0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x5, 0x0, 0x0, 0x1}], [], 0xfab}) timer_settime(r13, 0x0, &(0x7f0000000240)={{r8, r9+10000000}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xf0ffff, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:25 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:25 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0xffffffffffffffff, 0x24) 13:46:25 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:26 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x7, 0x3, 0x4, 0x20000000, 0x1, {r3, r4/1000+10000}, {0x5, 0x8, 0x3, 0x0, 0x5, 0x3, "37ef5a40"}, 0x0, 0x4, @fd=r5, 0x7, 0x0, r6}) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000280)={0x0, 0x7fff, 0x1ff, 0x1, 0x4, 0x1881}) r8 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:26 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x110, @time={0x9, 0x9}, 0x38, {0x3f, 0x81}, 0xc0, 0x2, 0x20}) tkill(r0, 0x1000000000015) 13:46:26 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x701540) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:26 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$setregs(0xd, r4, 0x6, &(0x7f0000000280)="068547f917fc0c197ac18fff35b270d0522f2e80c518a422b2edf683894897b85d546c3b425c73dd387f6ecbf60dc39c3bb2839117d7986e239e9bd05bdff46b7c28") r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2208.440598] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x1100}}}}}, 0x76) 13:46:27 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r6, 0x1544}}, 0x10) tkill(r0, 0x1000000000015) 13:46:27 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2209.070386] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:27 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x8001, 0x1, 0x4, 0x100, 0x3, {r2, r3/1000+30000}, {0x2, 0x1, 0x99, 0x8, 0x0, 0x38, "5e20e5cd"}, 0x7fffffff, 0x1, @offset=0x9, 0x936, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000380)={0x62a26051, 0xd92e, 0x8, 0x93}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000300)={0x0, 0x9, 0x4, 0x2000000, 0x1, {0x0, 0x2710}, {0x5, 0x0, 0x7f, 0x8, 0x0, 0x2f, "8f5bde54"}, 0x4, 0x3, @fd, 0x8}) tkill(r0, 0x1000000000015) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000280)=0x9) 13:46:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:27 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = perf_event_open(&(0x7f0000000140)={0x8, 0x70, 0x1, 0x4, 0x9, 0x8, 0x0, 0x6fab, 0x90342, 0xed3e5d2a1065a13e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3f, 0x2, @perf_config_ext={0xffffffffffff6d97, 0x1}, 0x42000, 0x1, 0x401, 0x0, 0x1, 0x7, 0x7}, r5, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8000001a87) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r7, 0xc0bc5310, &(0x7f0000000280)) tkill(r0, 0x1000000000015) 13:46:27 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000280)={0x81, 0x2, 0x1, 'queue0\x00', 0x80}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) sched_setscheduler(r5, 0x7, &(0x7f0000000180)=0x7) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x9}, 0xf) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:27 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x800) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x8}, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:27 executing program 0: r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) tkill(r0, 0x1000000000015) 13:46:27 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000280)={0x8, 0x999f, 0x1, 'queue0\x00', 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x282, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x81, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2209.782480] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x6c00}}}}}, 0x76) 13:46:28 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:28 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x101001, 0x0) 13:46:28 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/18, 0x6b) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000140)=0xff, 0x4) tkill(r0, 0x1000000000015) 13:46:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x5]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2210.424269] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x2bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:28 executing program 0: r0 = getpid() r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f0000000740)=[{&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f00000008c0)=""/48, 0x30}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/243, 0xf3}, {&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/113, 0x71}], 0x7, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:28 executing program 4: r0 = getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0xa) r3 = dup(0xffffffffffffffff) r4 = getpgrp(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r5}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r2, 0x0, 0x0, 0x0, r5}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0xc) r7 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r7, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:28 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) getpid() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, r3, 0x0, r3}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r4, 0x81}) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="1091a2e5230cb7f3f2ee84efce961a3868e8a734063959fb75846d2f28748fd4c9c2bfcdf6c560e3e9782e172fed11d2e03208c58bdefd558e09254c7c079dff6fd8520f0c1b703026d1bb134f16dc84240e7c1997b771e38d9c83b2ee9343d6e249b2ebc26fca2c4d6e957ccf59095181a3d1327f30566fd3e238c538c7b80b7621decc6acee0d477a82ec4712da7fadf5cd01368d6e6edffd61861580ff21d6a0dd77dfbb9a465acaa3b7dfb1c0425b71c27beae4c539aa947cffb41a270e0a19482c9e4b09b2c440062e258444916da18bc1b035fbe41c9e8ddbe8474c235e6bbe142634d30933eab277dc759", 0xee, 0x5808}, {&(0x7f0000000380)="07b3e17ae6a7992ac2c96d86c2aa2261b151925581e33bac33152194cab8635ef60a27b596b9bc35abc905f5885ff8d89dda9bdbf046d3abdf4201c1f707618d6284db0aa2e58deb509391e89ed00550862de16a727dd104d21f22caa05eabac9e52f5e3c8d3f9081b6cccd3d45f9afde9e79bb8450531906a7c2bfedeb3ad21bff6327878a921ff8dbad1", 0x8b, 0x77}], 0x400, &(0x7f0000000440)={[{@nolargeio='nolargeio'}, {@conv='conv'}, {@grpquota='grpquota'}, {@tails_off='tails=off'}, {@hash_rupasov='hash=rupasov'}, {@jdev={'jdev', 0x3d, './file0'}}, {@usrjquota='usrjquota'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r2}}, {@obj_type={'obj_type', 0x3d, 'losecurity#em1nodevem1vmnet0'}}, {@subj_role={'subj_role'}}, {@subj_user={'subj_user', 0x3d, 'GPLkeyring&self\'md5sum^ppp1\f$mime_type]/'}}, {@context={'context', 0x3d, 'user_u'}}]}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:28 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0xc20c1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:29 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/20, 0x14) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(0x0, 0x8000000000000000, 0x173241) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0x6, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2211.404776] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:30 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:30 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x3000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:30 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x200000000bd, @tick, 0x0, {0x0, 0x1}, 0x0, 0x0, 0xfc}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x800e}}}}}, 0x76) 13:46:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x6]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:30 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0xfffffffffffffc8a, 0x0, 0x0, "abe2126a8bcc988a9e54dae33bf9017942375ac59b08a0916987ba6310ed1ef5458c0696a2cddd9ebb07642b3f25438246de23ec3d4adfa7c91c7a758250f016280e7580a92a64d96025cefbad016a5d08eaff"}, {0x10}], 0x20}, 0x0) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:30 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2212.381126] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x3bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:30 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x200000000bd, @tick, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000280)) tkill(r0, 0x1000000000015) 13:46:30 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x82100) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000140)={0x18, 0x0, 0x3, {0x101}}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:30 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x1}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:30 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:30 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030b000000000000000005000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x200480c0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:31 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) bind$bt_rfcomm(r2, &(0x7f00000003c0)={0x1f, @fixed={[], 0x12}, 0xb6}, 0xa) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000280)={{0x3, 0x5, 0x7, 0xdd3b, 'syz1\x00', 0x9}, 0x3, 0x400, 0x3, r8, 0x5, 0x4, 'syz0\x00', &(0x7f0000000140)=['/dev/snd/seq\x00', '/dev/snd/seq\x00', '.*\'\\\x00', '/dev/snd/seq\x00', 'systemeth0([system)keyring\'mime_typevboxnet1&+selinuxnodev\x00'], 0x67, [], [0x2, 0x2, 0x5, 0x6]}) tkill(r0, 0x1000000000015) 13:46:31 executing program 0: r0 = getpid() stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r1, r2, 0x0, r2}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r3, 0x81}) sched_setparam(r3, &(0x7f0000000140)=0xa817) r4 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r4, &(0x7f0000000200)=""/18, 0x33c) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80400, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x2000c841) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000400)='/dev/urandom\x00', 0x6aa543, 0x0) r8 = dup(r7) ioctl$RNDGETENTCNT(r8, 0x80045200, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000440)={0x23, 0x6f, 0x2, {0x2, [{0x1, 0x3}, {0x80, 0x0, 0x6}]}}, 0x23) tkill(r0, 0x1000000000015) r9 = dup(0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r10, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffe57ec2a3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1a9a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x8802}, 0x14040810) [ 2213.457014] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xff00}}}}}, 0x76) 13:46:31 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400200, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1000, 0xbbbbbbbb}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:31 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$AUDIT_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3e9, 0x10, 0x70bd27, 0x25dfdbfd, {0xa, 0x1, 0x2, r0, 0x6, 0x7, 0x7, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24068080}, 0x20002001) r3 = dup3(r2, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000000400)=""/18, 0x7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f00000002c0)="980e3b95fb1b5b26120fdabd57e48047ba8f14e6b09767737815572eb4835d30aebd670e4e98b653255d4a5222136ba83297ae8f30ce86114059fa9ac6c7bf8ce6956224f6f55e19f54ab8bcb4aa46653ac793a346ea917f8f3361a7987fdefec5088f7cb6e11967410c8cec91ff8ccc0c55d9a0cf0ea3df96b1be806746e1821e470e0c7662caea2c5ede12db55ab5d5df02e8fe1d82d972074", &(0x7f0000000380)="66b4b6323d278ff781fda2ea733720d428060e5d588f3fd553d8198af17aaa98d3981a39c7e13cb246356a433a8019e9728ab8f89a84c4fae9e6b545ae1771156643fa771add20ee050923671fb5056c8d3b8e0797"}}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x4000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x7]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2213.615923] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:31 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:31 executing program 0: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x46e, 0x3, 0x4, 0x80000, 0xb29, {}, {0x4, 0x1, 0x2, 0x1, 0x6, 0xde, "c83a66f4"}, 0x7, 0x3, @offset=0x9, 0x80000000, 0x0, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000280)={0x8, 0x200, {0x57, 0x4, 0x200, {0x9, 0x20}, {0x6, 0x200}, @ramp={0x40, 0x0, {0x2, 0x7ff, 0xfae, 0x3}}}, {0x55, 0x3cf, 0x13, {0x7}, {0x6, 0x9}, @period={0x6, 0x5, 0x401, 0x5, 0x7f, {0x1f3, 0x7ff, 0x8000, 0x1}, 0x6, &(0x7f00000000c0)=[0xa3, 0x5, 0x5, 0x9, 0x0, 0xfffb]}}}) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r8, r9, 0x0, r9}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r10, 0x81}) tkill(r1, 0x13) 13:46:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x4bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:31 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000180)={r3, 0x10001}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) 13:46:32 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r2, 0x2, &(0x7f00000002c0)=""/106) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r6, &(0x7f0000000080)=""/196, 0x20000144) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r8, r9, 0x0, r9}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r10, 0x81}) write$P9_RGETATTR(r6, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r7, r9, 0x0, 0x7, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0x2, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) r12 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x3, r3, r9, r11, r12, 0x20, 0x6}, 0x0, 0x0, 0x100, 0x78e, 0x101, 0x921, 0x8d, 0xfff7, 0x9, 0x7fff, r0, r13}) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {r16, r17+10000000}}, 0x0) tkill(r0, 0x1000000000015) 13:46:32 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYBLOB="41000000396f8181cc6dbc84bc25dcdd7487e2ef7a0736a6fef15101b9dfcef6efef44f3432d00fd28d152594000000200"/69], &(0x7f0000000440)=0x49) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280)="218262e1786dd5d0afc37630ab26eae5c538cfc20b1b78ddf12690ff1795d47ef37d1dcc7f6ebfdc5f64e62c2fe2fdab458cebbfadbffa06bc4525c638d95430156e9c8a8640e2fd1850c0615793e0b0db527251b1c88be218ec18f16d57dfd0a74be563a81df82d62e967a272505b78753880e179ebf28b20f00afee39c8dd8bba75f00a374ec45b0e10c29d7a5a747b901f497e2db3772ea289f564978e1d9cc4b93a6260f62146d7fbf564b6457fa086684762d0b3e474e8391e93542c237dff50c9cfabef1b3", &(0x7f0000000140)="ef2369820c1deba45faf1c4132cc7d7305833a24f221bc6b501129bf430235748142e3c75b58d7c60568fa27c06040eb132791f41024bdd20c7facde08cb2858b67373c8e28d54271ee6c24acf9ad68bdff77f20bea531f472936ef25605c7e4a4e35dbbf5431c542bdaa53f372989eb"}}, &(0x7f00000001c0)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000380)=0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2214.998149] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:33 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/29) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r2}) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000280)) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000002c0)) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:33 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000f80)={0xf0, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r6}, {0xc8}}]}, 0xf0}}, 0x4004004) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r7, &(0x7f0000002000)=@ethernet, 0x10) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r7, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r9}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)=ANY=[@ANYBLOB='\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000c0000000000000600000000000000"], 0x48}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r10, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r10, &(0x7f00000017c0), 0x375, 0x0) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@dev, @broadcast, 0x0}, &(0x7f0000000500)=0xc) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r13, &(0x7f0000002000)=@ethernet, 0x10) r14 = socket(0x11, 0x800000003, 0x0) bind(r14, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r14, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r13, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r15}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r16 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r16, &(0x7f0000002000)=@ethernet, 0x10) r17 = socket(0x11, 0x800000003, 0x0) bind(r17, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r16, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r18}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) r20 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r20, &(0x7f0000002000)=@ethernet, 0x10) r21 = socket(0x11, 0x800000003, 0x0) bind(r21, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r21, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r20, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r22}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r23 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r23, &(0x7f0000002000)=@ethernet, 0x10) r24 = socket(0x11, 0x800000003, 0x0) bind(r24, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r24, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r23, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r25}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000780)=0xe8) r27 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r27, &(0x7f0000002000)=@ethernet, 0x10) r28 = socket(0x11, 0x800000003, 0x0) bind(r28, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r28, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r27, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r29}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r30 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r30, &(0x7f0000002000)=@ethernet, 0x10) r31 = socket(0x11, 0x800000003, 0x0) bind(r31, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r31, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r30, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r32}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r33 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r33, &(0x7f0000002000)=@ethernet, 0x10) r34 = socket(0x11, 0x800000003, 0x0) bind(r34, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r34, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r33, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r35}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r36 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r36, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r36, 0x113, 0x1, &(0x7f0000000340), 0x4) r37 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r37, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r37, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r37, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xffffffffffffff69) r39 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r39, &(0x7f0000002000)=@ethernet, 0x10) r40 = socket(0x11, 0x800000003, 0x0) bind(r40, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r40, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r39, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r41}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'team0\x00', r41}) r43 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r43, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r43, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r43, 0x29, 0x23, &(0x7f0000000f00)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001000)=0xe8) r45 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r45, &(0x7f0000002000)=@ethernet, 0x10) r46 = socket(0x11, 0x800000003, 0x0) bind(r46, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r46, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r45, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r47}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001100)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000001200)=0xe8) r49 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r49, &(0x7f0000002000)=@ethernet, 0x10) r50 = socket(0x11, 0x800000003, 0x0) bind(r50, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r50, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r49, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r51}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r52 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r52, &(0x7f0000002000)=@ethernet, 0x10) r53 = socket(0x11, 0x800000003, 0x0) bind(r53, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r53, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r52, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r54}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r55 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r55, &(0x7f0000002000)=@ethernet, 0x10) r56 = socket(0x11, 0x800000003, 0x0) bind(r56, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r56, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r55, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r57}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) r58 = socket$netlink(0x10, 0x3, 0x0) ioctl(r58, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r58, 0x8933, &(0x7f0000001240)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000001a80)={&(0x7f0000002080)={0x810, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x80, 0x80, 0x40, 0x1ff}, {0x1, 0xff, 0x7, 0x4}, {0x4, 0x1, 0x3, 0x8}, {0xdde, 0x20, 0x80, 0x400}, {0x5, 0x1, 0x4, 0x2dc}, {0x7f, 0x0, 0x0, 0x7}, {0x5, 0x81, 0x96, 0x3}, {0x1, 0xf1, 0x7f, 0x700000}]}}}]}}, {{0x8, 0x1, r11}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x1, 0x8, 0x5, 0x7}, {0xff, 0x8, 0x8, 0x20}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0x80, 0xff, 0x4}, {0x8, 0x12, 0x7, 0xfff}]}}}]}}, {{0x8, 0x1, r19}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r25}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r26}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r32}}}]}}, {{0x8, 0x1, r35}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r38}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r42}, {0x4}}, {{0x8, 0x1, r44}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x88d}}, {0x8, 0x6, r47}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r48}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r51}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xef5d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8, 0x1, r54}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r57}}}, {0xffffffffffffff24, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r59}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x10, 0x9, 0x80, 0x6}, {0x5, 0x2, 0x1, 0x80000001}]}}}]}}]}, 0x810}, 0x1, 0x0, 0x0, 0x20004804}, 0x20004002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r60 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r61 = dup(r60) ioctl$PERF_EVENT_IOC_ENABLE(r61, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x5000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x40000}}}}}, 0x76) 13:46:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:33 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2215.441263] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:33 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x2}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000380)) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0xf1) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r6, 0x40}, &(0x7f0000000180)=0x8) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r8, r9, 0x0, r9}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r10, 0x81}) tgkill(r0, r10, 0x19) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0xc8480, 0x0) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, &(0x7f0000000340), 0x4) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r12, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r12, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_QBUF(r12, 0xc058560f, &(0x7f0000000280)={0x4, 0x5, 0x4, 0x2, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0xff, 0x37, 0x5, 0x80, "93b0c8cd"}, 0x6, 0x1, @offset=0x6, 0x9, 0x0, r1}) setsockopt$bt_BT_POWER(r13, 0x112, 0x9, &(0x7f0000000400)=0x3, 0x1) 13:46:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x5bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:33 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x404080) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0xfe}}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, 0xee01, 0x0, r3}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r4, 0xffff}) timer_create(0x0, &(0x7f0000000280)={0x0, 0xf, 0x0, @tid=r4}, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) ioctl(r6, 0x1000008912, &(0x7f0000000380)="080dd4084475754dd6280993e17766e39c8439810f5f9583a287c28c9a4a2e08fe04680b06d9aaff188d04b0a8104f017640ff50cc887993799f3d0faed3f41c584565d446c30492b0b1e2373b72920d332578063803c31f7a4e9dd77a52cb0a3527c20265e4481454a3bb8e6b6d314985fd3f01c9185df31f867a9ea9e3d02835177239ffada2ffca3ca47c956b1b8c5492367bf0c15c538c5b7fdfc0d2853c60cb6c480d08976e7c1460993b9f5740448781108e1657e08f7dc3c1c6d59b36a9da4372c191f553c89b2a5c43dcaeaa59bfa9475a34c53b06b0106dd2257174c8e2d4444cb5a425332056005652dd7b44") r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x20002, 0x0) r8 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:33 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:34 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000002c0)={0x1, 0x0, 0x1f, 0xc7c}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x300, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x10880) tkill(r0, 0x1000000000015) 13:46:34 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x10000010}, &(0x7f00000001c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x111000, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:34 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:34 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x20000000039}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000140)=r5) [ 2216.543272] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x1000000}}}}}, 0x76) 13:46:35 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f0000000240)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000000c0)={0x6}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x1c9c380}, {r6, r7+30000000}}, 0x0) tkill(r0, 0x1000000000015) 13:46:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x11]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x6000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:35 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) tkill(r0, 0x1000000000015) [ 2217.083349] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:35 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x8, 0x80000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x9ed, 0x8, 0x3, 0x4, 0x1, 0xebda, 0xd, 0x7ff, 0xfff, 0x47, 0x8, 0xff, 0x9, 0xffffffffffffffff, 0x8000000000, 0x1], 0x4000, 0x2000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:35 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x6bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:35 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, r5, 0x0, r5}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r6, 0x81}) setpgid(r0, r6) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)) socket$vsock_stream(0x28, 0x1, 0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:35 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = epoll_create1(0x80000) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000280)={0x1, 0x0, 0x1000, 0x1000, &(0x7f00000008c0)="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", 0x70, 0x0, &(0x7f0000000140)="c9a2cf4d3576a8d422bdf0905ace834ee28079c578b393ffc9f5583f1d1b37a1ca68da2dd2c428d069cc01839a804a7e9193987d6e6ad652f029a30e7b7226bdcf793d209498e1c91a8781b5f12300d25d2c32c7b18a1ae85e58fe37e8077b97f51f992fb48da37384c9e8756cae962e"}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:35 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x670040, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000720c00"/15], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4004000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x4, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8855}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4190) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000049030000000000000000000500000808000640000000010c00048008000140000000000c00048008000140000000000800054000000011dfdd196f0f9e65057bdf1f3d2572b9919d642da7fc408b7e603c0c1e46d07b9c5bb6ffd308a3dbf3ce0435de988d698d044e2fb1274c97c48b608fd6b825133af1f9f9f0e1daa4546f0ce177be5612e8d75c8590b1009aadcc4180a4990d4ea51766b116e68d835218a6ec2c459918f83c7f3b23d7d9a401a182b2ff7f70fa95780eb098795f2fbd"], 0x3c}, 0x1, 0x0, 0x0, 0x24048894}, 0x8000) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x1) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000600)='security\x00', 0x9) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:35 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/20, 0x20) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000280)={0x40, 0x0, 0x900e, 0xad, 0x7, 0x6c4365c8}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) bind$ax25(r2, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x814) r5 = semget$private(0x0, 0x2, 0x5c4) semctl$GETZCNT(r5, 0x1, 0xf, &(0x7f0000000440)=""/90) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2218.171356] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x2000000}}}}}, 0x76) 13:46:36 executing program 0: chmod(&(0x7f00000000c0)='./file0\x00', 0x10) r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x15}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x60]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:36 executing program 4: r0 = getpid() r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000000c0)=0x7fff, 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x402c5342, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000100)={0x7, 0x5, 0x4, 0x8, 0xffffffff, {}, {0x4, 0x8, 0x9, 0xad, 0x94, 0x81, "c916c69e"}, 0x401, 0x2, @offset=0x721, 0x7, 0x0, 0xffffffffffffffff}) mq_timedreceive(r4, &(0x7f0000000180)=""/75, 0x4b, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x7000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:36 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2218.848082] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x7bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:37 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:37 executing program 4: r0 = getpid() sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000340)=0x7) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000008c0)={0x2e84, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2e58, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}, {0x15ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x58, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x204, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "5bdfb6892640f8c8d93cc9ad53ab5c7f292db43d40fd96e249b9c411cd64de527f40bae4afc3"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x84, 0x1, "148da3c9bb18ec0e67bc141c627737cbc0d8b1c9b47bc4322a0e57a9b9cca52757b935486e52184047cec54d764e344a9fe0f37d22cb0788d34b5ea62952320e0db20a0d92465863587e00673b2187f745a4d8f5812503ff45b7047ec6b9510993e372aa8008a768df62d105a4f697212cf0b1c7f218e8377a2f9c03a6eec541"}, @NFTA_DATA_VALUE={0x5d, 0x1, "f1bc1b0ae0f848a585fb06d03dae2efad20a4ad3a6e232553a74e210d849df4356a7250848537bcd593d648ef0feec3d6fc975a60764d7b9a0da12209a0f96c2039b0bd8dce76e4f74155b2b767ac8bfb893fca389962dedb6"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x61, 0x1, "bd5dc7e47debdba52246e883f32c59eae9729026e98d254e7492beff5face486d5d25b3ff1770098455d0030992c7a7ae11c906fdc0cded15dd5113ba1aef08534a3d75fc7d8424443f506444ad213d964345f45734a3cad32e2661591"}]}, @NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "f9b38ecf4d7be1e746798f5f32f03611654b63280a05f39a362d672cc899901b26f4cf341815f99d71f56954d4a89067795d581ca252fe389e140bc254f89383742df9aad5438afa68f89a1f1584011d575e78a62bd530e0f53433e7f08822f378b37f41eaca7aefea82469b546db80dda22ba3d85e5faa70bad9b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xe, 0x6, 0x1, 0x0, "1658132de2046097463d"}, @NFTA_SET_ELEM_KEY={0x126c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdc, 0x1, "b2e9055bb2f6f22c2501f1d0aff4f164431df5b6b52c987cbcc2c08530d1a95a9da1c0b5f99ba3aa01ad9c330c092986b84746fc9aa78a28d0a2be40b83c233a03871fc3d9826fc001b13060f126396ee01fcdd7e164e85c314249f407dad010e29ca0b0258ae955421d2c4d0ff23cbcc6ec33fe3154889f8475cbb9231067da5816743750071ea126208ae7f45a45b0d10a4ac2f87622de56d7d1d95556adc664ac725a55a0c2274e0509dbc33abc2602dd561a102c000fb86c0b404279626c2c2625a0b1f3738413956fe5331f24605298997f1757fa8a"}, @NFTA_DATA_VALUE={0xe1, 0x1, "5e5809c3e5b709288dfafb55d281286437ca8ebd02146aed1b6b5dfbe934b0ce5ea020360f3fd2c122803444bb3f2d2c5af29510b0e9d99dd1974e6be974c3dc4ddb4eb6ae1b9f4251e6f14f80bfe4dcb5303070fc00a6719c3bef5faecdcc3984a367d4d7b5d8a6855c85a5b4f9e1662da86fa65f7f8ab2c5b403f7b875aac43912d2157f124b2ca1968f13a95f8676690b148279d8dd97c0d719c46082fbd27759f46bdd21bcb4fdd3a48fe5998a45d3a72b57a28059ddbe30f293948e555bb291324a4586582299577541d119640dd5f0e8156ac12323eb99afc31f"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa3, 0x1, "a58ac1f9674dd070294247e4bfce002f3418787f9b93c765046412aba853a9292153d517a481921e22af3d64d3d48aa0ade99c70c8d0eb97787d5b738c07aa365c38bcc02e8c0761d7c795feac3ee8913dd3f1c1079a16fd50e8957379f422eea38ac1b270f0509210c9f86a9426d163539405dcbde29e8b84a11d3a4bf1dde989350b2e796b606b1d36dfeecdb045bcd358c691ca4944516387d3d0d8b1e0"}]}]}, {0x1850, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xca, 0x6, 0x1, 0x0, "5fbe06c52369fa76589761130df528dfd58ca3ea3aef8fd1a3744e563147246577e4648a0059d695730efdfe9dc3db7095ce14102f13127f119ae6e813eb54857d11dd5e979bb227b2675c0b6b07bf023342ae9d4c1bb7fe2f65958baaa19cd66a01eda6576a0a5e21c8a71de6d5734427bd952ef059f94244bca2661d42098143f6ee355655311310aabdfa85ae71234fcc9f485676d4189776bd38c772c8ed26c88c7143c9002f9b5709042c0f6d4ff503f987bbec0d86485be199f67c32d71569c7ff19f7"}, @NFTA_SET_ELEM_DATA={0x12ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "ff3e22aeb22193d537a086461ebc60ae72125c1e4ae5480a06e50458e0ead5cc836ed290c693fe26fec616271e5edc7d17d161a08f1f32cc9da2b26cec1c6632ef30c18f635757cf6c1bbed2dc01b2b28933d8239838a369c2aaafdf1101d101b0eb81f9d43fb7302633cc3897c859d4173806738a1bd08d68ea20e309f0d60459dd5dba5fe02e09e18cd3ac55f6f110978b6f5122a9e2847438dbf6ee1f4e108a807b055c7b72ad565b03667962dd2beadbe0"}, @NFTA_DATA_VALUE={0x2e, 0x1, "6c4d8c64d956e8b4c8746dbfc7e87598775970469e8a76849399fd451cbf6234da73837f82a6801519d8"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "96ffaf03df36b118a30aaff08295cf4bd7e41cd853743bc0b516b576f1e191f57e5a3a7961bf833282f35a0c994e7f168e225e8e51774b292f7bf1a9ef8f2c102e0fceefd761ff2bcf99bee476635e60e5aa207b6b77e6cc94d4dfc2cca86b59cc8f5d58fe785b05e9ceb6109df49d9b42620f02921d4a8c957509cb4b9bf634b7eab06e70a6a549afc4b8e5c142a0199596c842c049fd9e237c5af38b0a4cc5d5ff6a2273dbb5023811b94d99ae90999328f6db4df9365adf1d6dd12f569f732e7691987892619a105d0f6179886cb6b8"}, @NFTA_DATA_VALUE={0xa7, 0x1, "444d03b0584add9b2d0535d4bcd9db18c48953c3f481551db1848e4c8dd5375c8f06a4ddc93abd5d4837b61e1916a3a8d83d292411b1da2d1702df91e7975b7c3df4d3e53c1fc8e3889067af388eea2e2b7d55c775376ad44fc0285c3ee6a802cad2d3957e8ff43476218f0032b458c4c981e4bb6968ab3fa2cc6a17354fcfa489526abbfccaf7d169f892ab001f86c495f435e952809f5436a7e4ac0c867e955530d4"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x3b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "837a90d116748c0f94da2ed5247c5bcdd6b76d68fd32c18f948892abede6391b92bfc9c008b74b039f1fcf4186378e652706e8d0042ee75badcf909020d1e681742fcd1bba428e948125c6984e146a5b3bbd5a6ae1b0a4ea4087c7192fddb2063a1503a1d6115c2ca3c944280f9fed054d030368affe0296b4132eb40c348290e8fd1c5d292e5e67117add99d133f7c88fb8f3654dd3a17b344e10c597953f4dd7246cfd6de0a9dc10c413ab26bc8e7bb5a09d830e03d03cb23e56f635ab8677674ad0673bf76867978edf29bd287950179928e561a9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "ef29677c846cef0911dfcfb46d1d45d716c10f91d0ca0e14ebb8bb68a5e2c86882889ddb676a9e0f42f6e922c046bde238f45a1cd7c4be4e11d62e98494280351991d629c2af7a513bced30bccd1cf94e1b9e1ee8b87058768bb7ef3a015f68181d12d8c4095411cd812fe0fcae1ffbac43eb91d3532259d70e0e1ce5951cf826ba1b51d0c516349d99e741710f888d999213f910e3f9b03cd7b53c6eaa28d1620b3bf879d3bd95fc4c14410383594d075dab841df1af74bb6c737479ac2f4b3fe8a33487b9d5e87b99711400e7f0fa8bda55f35544c23215cba616bf184744e7eaaf8"}, @NFTA_DATA_VALUE={0x8c, 0x1, "7d83d3c80f1061953e56c23a10962b33ccc43de1cbf7a9b1d6508f63fa04560693d01b0992201a9d39fdac913e0cbbf78217433c781d931acf5a7bda71e1f0c6289a1df2ae2f62d9590c186b3881129b528ac351956b393e05ca128a40c2f010a16ab62af430676e352395f382b7319d3e6ef3db0d57062347e0e7d65b8c346ec3684e843036c768"}, @NFTA_DATA_VALUE={0x54, 0x1, "84ab6d9423d563301324207a7778a013d6425a2169967381ac3572dbcb21ad2775a606423d5c380828c69e6f439476ee9a05643066f59eafc198b19bbda4fa6408bd2cd3beeed107c8c83e6971344567"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "36d89d4303cbdf4be6048ce77a181c4643837876a136b7f1673aeac6edae2f311911d71f90d6b2a701e28bc9106df3dc1020e56ec832d8b0b2e57077ec292c0e304c99b85006deacc7f86b937a948f546a924569077e3c523c36ee25ac70f36aac16a89b3d0b9c9d7a9bff634479110e0e2bcce9e1a78cfbcb9afe57558458d07beb203093c63edc52e5163d1abc3b9ea0ed8bcb07825c9fa359e3d8abce0055d827e2c52ba8696ea817c2e4dda5adb8cedc933eed76ca693f6fdc27a2455f57424efedad3947eaf7e"}, @NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2e84}, 0x1, 0x0, 0x0, 0x48004}, 0x8845) tkill(r0, 0x1000000000015) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r6 = dup2(r4, r5) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000380)) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000280)=""/113, &(0x7f0000000300)=0x71) 13:46:37 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000140)=0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:37 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x37}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r4, &(0x7f0000000080)=""/196, 0x20000144) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x802, 0x0) write$selinux_attr(r7, &(0x7f00000003c0)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) fstat(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xfc, 0x8, 0x5, 0x201, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x5}, [@typed={0xe5, 0x8c, 0x0, 0x0, @binary="d120e239f7eeefbcfd0ad7540c18eef4d1c4ba297753808441a9b2b82b03fe16aa649eaf7894d6ccd1b107b3976c76c7f37d2a4004b20e2960016ffe659ac00f2a831cb021536f43e387c73c4b4b507ab1fcff34b5b51ab8f57a9d528786cf4508d55c3204ba44c685c19890b81fc8d1ba00bdbaeb969aac868ea14ab01bc1bf3d6193055c5b051369ff09c18f227695375148579d61c1a925c46b5716593842c8d5b110cb90e95f1f09fa88476677a9ce1f2e7349e049e7c1d9a2f8029422a4bbc39a0ee81de2c8f7cfca5f6ee6ecc1b76a6191bc306a1fa6146e1c1a6084ab52"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x804) r10 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, r9, 0x0, r9}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r10, 0x81}) write$P9_RGETATTR(r4, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r5, r9, 0x0, 0x7, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0x2, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x100, 0x80}, {0x4, 0x9}], r5}, 0x18, 0x2) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000400)) unshare(0x10a00) tkill(r0, 0x1000000000015) 13:46:37 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x101402, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000340)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x3, 0x3ff}, {0x4, 0x19}], r2}, 0x18, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1ec, 0x13, 0x1, 0x70bd2d, 0x25dfdbfd, {0xf, 0x7f, 0x2, 0x3, {0x4e22, 0x4e23, [0x0, 0x2, 0x1, 0x10001], [0x88a, 0x400, 0x3, 0x7], r5, [0x80, 0x8]}, 0xe8f, 0xd81}, [@INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "1c406cfeea1284e1797f8adffc674737922169b4437d2f5b56429ae5ce5f7d7a33a004a4b0df0a92f2b2c8593e62eac9420f77c047cab2af3c4dc46659a617fc2a2142b69062010763c0915fd3f6530f79d7af0110667181433533ee85540c8b4aed51132d31e4204fbd98f14e32e75b6100cd3c29a1fd37d7d0672ed6ebf36f3ea22c1a93b8b9fa68bb559d48c9f8c01393eba8e5a29636437c7fd133dd3da211c2c976f7f4619455cac4299d231a5daa5cb6db4c7fe861b1b6698548662ce2c53037f4eed2ba37dcb9e2c079668b04f672daf709"}, @INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "2474a1145f16b3b9739be285c4388d2fc4f72004899107e9698cba1841b68b7f7882a56b46559d10d84c1b91b6fb535d7d56769095b743dba09274e4c6666d8c283dae34fad558076fe4266b51ee63bf03f913f4065aaeb73b129fb88cf826098e3a2f6d39ff698707fe4335c2d2373ffab2bc102a6c736fd333fe7d1530a868129c05f33745766560888fbca44f7a972b4493738c7d1cb5c55ec8c2afa9da101a1c19584fa50d4ed8a0b3acdd6285b71c421c47910ef5910bb3f939c478c6"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x11}, 0x80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2219.571455] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x3000000}}}}}, 0x76) 13:46:38 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @addr=0x3}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$VT_RELDISP(r4, 0x5605) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) syz_open_dev$vcsu(&(0x7f0000000400)='/dev/vcsu#\x00', 0x79a, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x620a83, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000480)=0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r7, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000002c0)={0x1, 0x7fff, 0x202, 0x1f, 0x1f, 0x3, 0x0, 0x7, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r8, 0x4}, 0x8) bind$bt_rfcomm(r4, &(0x7f0000000280)={0x1f, @none}, 0xa) tkill(r0, 0x1000000000015) 13:46:38 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:38 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {}, 0x0, 0x0, 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={{}, 0x0, 0x0, 0x3, {0x0, 0x1}, 0x0, 0x10000}) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={&(0x7f00000004c0)="de0757fe4d45d82c6c3d47fb2b8298ee04ada2436c905844ade91f8af5b41641e52186f6c105e67a8e1105a4f44caf3512b2add56df047733fd69a910c73ffce4bea6d99d34e8b0aec87fcbdd29479d8619f0df6113e575b03a3213964679fcafd713a22af466a9d54eeb2cdfc76c9f4416898159c8a4728f412fd039062729af3ca3181ce1abe800da6a41ca6d7c992cdb1ca0d5abd88244ed9d92b717a86bda233fcf4b961966ecd59eaef14e7180bc55ec72a646d1b7536acbc18ea4de635a6c2a78b98c0ff2658019f22d45ed39f9eb04b6c260992f20de783", &(0x7f00000002c0)="7d058b9ef89d7c02f69fde230537ca658a7de9c8fead21d490005824aff09f1ff769b7c60f8ad86567be8a0c797f6a9b281a71952699db29143d9d2965afcfdc2ca72305276fdda8bc83756e0c5d9776eb4c75d73c48b23dbd868de42138ac4fd8aa3d49"}}, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000990}, 0x4000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000380)={0xa10000, 0x8000, 0x7, r5, 0x0, &(0x7f0000000340)={0xa00906, 0x7, [], @ptr=0x9}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000020703007ab0000000000000030000d4bb6ae800000000000000940007800800014000000004"], 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x24008000) 13:46:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x8000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x6c]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:38 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:38 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000680)={'wg2\x00', r3}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2220.755346] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000400)={0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000540)={r4}) r5 = getpid() r6 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r6, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r9 = accept(r8, &(0x7f0000000300)=@nl=@unspec, &(0x7f0000000380)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @empty}], 0x30) r10 = dup(r7) syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x3, 0x2) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x1a3000, 0x0) fgetxattr(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="7472757374653d923ec0fc2e010001001f7a1e642eb940b880876c"], &(0x7f00000008c0)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r12, r13, 0x0, r13}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r14, 0x81}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x2c, 0x0, @tid=r14}, &(0x7f0000000140)=0x0) timer_settime(r15, 0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, 0x0) tkill(r5, 0x1000000000015) 13:46:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x8bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:38 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:39 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2221.352736] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:40 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) timer_create(0x6, &(0x7f0000000100)={0x0, 0x12, 0x2, @thr={&(0x7f0000000380)="33cebfae9fa0c6100c17d420acc3f2116d", &(0x7f0000000440)="4107337e4029a166ae629290641f57e02d0214973156dd8c6d0eb3df193dbd69f883239a4201e8671c4e062d2861"}}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000280)={0x3ff, 0x66a8, 0x4a52, 0x80, 0xffffff7f, 0x3}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:40 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x617, 0x4) read(r0, &(0x7f0000000640)=""/21, 0x15) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000340), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000280)={0x0, @time={0x3, 0x800}, 0x1f, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x402c5342, &(0x7f0000000140)={{0x20}, 0x0, 0xffffffff, 0xfffffff9, {0xfe}}) socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffe, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x22440, 0x0) pwritev(r5, &(0x7f0000000580)=[{&(0x7f0000000380)="7df27329ce6fbe7d7377c01d90a685b9d35dbc9c81a70fd152a6fc7dd0c5facc78522f7ca73a59e2c8f011c9e8f288a128213871f8dda9ad7dc4b64e044378e5143e1109d6a78841a4d57af379919ffa52fbff4da9e871737c9291d76546674acc161aee711adf46c140e6d4d8f216150a41bbefe129e370d425961fe48067b8788e9af88abafc818381f5873f3232b6f481c25d8b", 0x95}, {&(0x7f0000000440)="445a5733c2f8c4a2a1bc196a1f97f84dca5a79ae6d615c0ddd5b570bd24355b02250db66340577014ab2a3efb65dced8ba77851f35a6529f0f22475fa7626de6736cac29fac077a4ae68c1f9706367899eed24f5678aa15bc02155ad88d60f29a458364b0f520d8188300637508b961e6f86d081b892be05d9badfba97433c40b97bf5d8a2508efe6dcdc21d10dc6728367bfbe8ebf873ed7a03d5e50b41", 0x9e}, {&(0x7f0000000500)="6c64d73d62886af0e0793fe306cd824081bc5b5084269d5aeb5376faaeb58d51d965090f554f145856420f754aee66ae9a869e268053d617bc00079be3c64bba3a3ed35e21a6e6d2a8c1d55baec351b487", 0x51}], 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) iopl(0x9c) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008911, &(0x7f0000000200)="080db5055e0bcfe847a071") splice(r8, &(0x7f00000005c0)=0x1, r9, &(0x7f0000000600)=0x9, 0x0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000680)) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r10, r11, 0x0, r11}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r12, 0x81}) tkill(r12, 0x8d) 13:46:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x9000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x4000000}}}}}, 0x76) 13:46:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:40 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2222.110283] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x9bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:40 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000001bf, @time={0x7, 0x8}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)={{0xfb}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) r5 = syz_open_dev$vcsn(0x0, 0x81, 0x696a00) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000300)=0xffffffff, 0x4) ioctl$FBIOGET_CON2FBMAP(r5, 0x460f, &(0x7f0000000280)={0x15, 0x2}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x220000) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000340), 0x4) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180)) ioctl$SG_GET_ACCESS_COUNT(r8, 0x2289, &(0x7f00000000c0)) 13:46:40 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x2}, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$TCGETX(r4, 0x5432, &(0x7f00000000c0)) tkill(r0, 0x1000000000015) 13:46:40 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000000c0)) tkill(r0, 0x1000000000015) 13:46:40 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1, 0x2, [0x5f30, 0x1]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="6100000059290628a193166bda83ee53b8476bc200000d369b2a094f124e73aa551da0c11e3dd5835268dfc48ee1d2c92316ba00f1ed10537f9a1978b0258644d59842ce0a33857a1fc8a75bafec64da47c76c942562adbb00000000000000006b5ccf0d35"], &(0x7f0000000180)=0x69) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:41 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) read$char_usb(r4, &(0x7f0000000140)=""/117, 0x75) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2223.004412] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xa000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:41 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:41 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0x2f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ptrace$peek(0x3, r0, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{0x3, 0xc0, 0x0, 0x1f}, {0x40, 0x81, 0xb7, 0x5af}, {0xe34, 0xd3, 0x9a, 0x101}, {0x1, 0xc2, 0x40, 0xff}, {0xeb, 0x1, 0x3f, 0x80000001}]}) tkill(r0, 0x1000000000015) [ 2223.218640] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x5000000}}}}}, 0x76) 13:46:41 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) write$snddsp(0xffffffffffffffff, &(0x7f0000000300)="a365aec168d052ed2ed4526cbc7bcf578938129d2c0d46649dc7d1fe1d5d22ed86b2d510e792e96339e04ae6d7063b8e756a61fed28e9f5a4b32ae7cfc", 0x3d) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000280)={0x980000, 0x93a0, 0x7ff, r1, 0x0, &(0x7f0000000380)={0x9b0962, 0x2d, [], @p_u8=&(0x7f00000003c0)=0x2}}) ioctl$BLKROGET(r4, 0x125e, &(0x7f00000002c0)) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f00000000c0)={0x6, 'bond_slave_0\x00', {}, 0xb4}) 13:46:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xa020000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:41 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000380)={{0x2, @name="b288d51485f802ceab464bd284ad3437f1e1ca80777fdaa1aedbb191e7470daa"}, "02355d31ea47c7abc1e1380288fe75ad35c98174bd71f29cc3e290981eaf4364", 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000280)={0x3, 0x7, 0x7c7f7c40, {0x3, 0x37d}, 0x3f0, 0x4}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f00000000c0)={0x2, 0x9}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x103002, 0x0) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2223.891485] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:42 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000380)={{}, 0x0, 0x1, 0x8, {}, 0x0, 0xffffffff}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) get_robust_list(r0, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000140)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000280)={&(0x7f0000000180)}}, &(0x7f0000000340)=0x18) 13:46:42 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xabc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:42 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000240)=""/18, 0x12) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000ff, @time={0x80, 0x8}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {r4, r5+30000000}}, 0x0) tkill(r0, 0x1000000000015) r6 = syz_open_dev$vcsn(0x0, 0x2000, 0x40000) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000280)={0x0, @reserved}) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f0000000180)={0x1e, 0xfffffff7, 0x3, 0x4, 0x1, 0x80000001}) 13:46:42 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) read(r2, &(0x7f00000000c0)=""/17, 0x11) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x5, 0x1}}) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) write$P9_RSTAT(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="610000007d010000005a00f8ff0600000001030000000300000000000000000080c41f00000000000d002f6465762f736e642f736571000d002f6465762f736e642f736571000d002f6465762f736e642f73657100"], 0x61) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x402c5342, &(0x7f00000004c0)={{0x10}, 0x1, 0x0, 0x9, {}, 0x0, 0xb897}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000280)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2224.913788] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:43 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x141040) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2000000003d, @tick, 0xfc, {}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x1, 0x0, 0x7f, {0x0, 0x21}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = syz_open_dev$vcsn(0x0, 0xcfff, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/105) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000100)) 13:46:43 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2225.590990] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x6000000}}}}}, 0x76) 13:46:44 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000300)={0x6, 0x4, @name="8311e7f0d40c7c2131ababce22de8bef00afad857124293c5312983e97b0594f"}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4c014}, 0x4) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, r5, 0x0, r5}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r6, 0x81}) ptrace$peekuser(0x3, r6, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r7, &(0x7f00000017c0), 0x375, 0x0) ioctl$PPPIOCSMRU(r7, 0x40047452, &(0x7f0000000140)=0x5) tkill(r0, 0x1000000000015) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r12, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r12, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_SG_ALLOC(r12, 0xc0106438, &(0x7f0000000580)={0x9}) ppoll(&(0x7f0000000180)=[{r1, 0x2}, {r2, 0x1443}, {r8, 0x2281}, {r9, 0x1000}, {r3}], 0x5, &(0x7f0000000500)={r10, r11+30000000}, &(0x7f0000000540)={[0xf7c5]}, 0x8) 13:46:44 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) r3 = dup3(r1, r2, 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x1}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{r6, r7+30000000}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x50) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000140)=""/25, &(0x7f0000000180)=0x19) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000400)) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f00000005c0)={0x0, 0x7fff, 0x2, &(0x7f0000000580)=0x3c}) ioctl$VIDIOC_DBG_S_REGISTER(r10, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r10, &(0x7f00000017c0), 0x375, 0x0) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$rose(r11, &(0x7f0000000300)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @bcast}, 0x1c) ioctl$SNDRV_PCM_IOCTL_PAUSE(r10, 0x40044145, &(0x7f0000000280)=0x9) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000340)={0x0, 0x4, 0x40, 0x7, 0x8, 0x19d, 0x2, 0x98e1, 0x70e, 0x0, 0x71e, 0x5}) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r12, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r12, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(r12, 0x770a, 0x0) 13:46:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xb000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:44 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2226.379315] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xbbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:44 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) getsockname$netrom(r4, &(0x7f0000000280)={{0x3, @rose}, [@remote, @bcast, @default, @rose, @default, @bcast, @rose, @null]}, &(0x7f00000000c0)=0x48) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r3, &(0x7f0000000140)={'syz1', "2e6efe93ce960450dd2b3c4c5a358e286a43028fdc0de2647f4042ffc3f9940b21f263a22dec60fe0ac119ce0d178557af24250b30c5d765cdcfb873f5857c456c63fc123c80a8ccba6ecc0fb88b4d4dffa05efc6f56ef44768788"}, 0x5f) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:44 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x180, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x7fffffff, @ipv4={[], [], @remote}, 0x400}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0xf}, 0x80}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in={0x2, 0x4e24, @multicast1}], 0x90) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007041dfffd946fa2830020200a0009000000001985680c1ba3a20400ff7e280000005e00ffffba162441caf0da3b40c925234476d0b818a0aa1c0009b3ebea8653b1cc7e6397", 0x4c}], 0x1}, 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r5, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r8, &(0x7f00000017c0), 0x375, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x3ff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x5, 0x4}, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x0, 0x2b6, 0x5}, &(0x7f0000000440)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x1f}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000000c0)) tkill(r0, 0x1000000000015) 13:46:44 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x64, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:45 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:45 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x6000) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)={{}, 0x0, 0x0, 0xbdb3, {0x0, 0x20}, 0x0, 0x3}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000140)={@initdev}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, r5, 0x0, r5, 0x12}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r6, 0x7d}) sched_setscheduler(r6, 0x5, &(0x7f00000000c0)=0x3ff) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2227.519073] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:46 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x38521943, 0x4}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000140)="4d5b6e358c0dfed599fd84c36389c8b960a57b3c4d588e82931048406f71cef3e5ccaf2e3d23efdb8340214a004b1f134946f851a8b2d7fa6dddc83ce294fad5874f39cbc8ae61a2fcde12db91480272fdc61dda18501f18cbf1e47d1b4713", &(0x7f0000000280)="dedb85164134301f2283db2d78984a4bca0a07a9c781e4f28d5889f09d890e05e544538cf50b4260281c062b5af82aadec268efa8bfc4cf242efa857ca049acc81c653bdc59c01fa87b0d4bba5b700de01bf1f6ad55b2dfb"}}, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:46 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x7000000}}}}}, 0x76) 13:46:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xc000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:46 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2228.269648] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xcbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:46 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x0, 0x40}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x28}, 0x10) 13:46:46 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/126, 0x7e}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/231, 0xe7}], 0x7, &(0x7f00000008c0)=""/66, 0x42}, 0x9}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/48, 0x30}], 0x1, &(0x7f0000000a00)=""/157, 0x9d}, 0x800}, {{&(0x7f0000000ac0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/216, 0xd8}, {&(0x7f0000000d00)=""/213, 0xd5}, {&(0x7f0000000e00)=""/249, 0xf9}], 0x4, &(0x7f0000000f40)=""/229, 0xe5}, 0x80}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001040)=""/33, 0x21}], 0x1, &(0x7f00000010c0)=""/176, 0xb0}, 0xffff}, {{&(0x7f0000001180)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001200)=""/1, 0x1}, {&(0x7f0000001240)=""/255, 0xff}], 0x2, &(0x7f0000001380)=""/230, 0xe6}, 0x3}], 0x5, 0x2000, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0xf6, r2, 0x1, 0x3, 0x6, @multicast}, 0x14) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:46 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x2, 0x1, [0x576, 0x4, 0x8001, 0x3, 0xffff7a5c, 0x3ff, 0x1, 0xcae9]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:46 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/6, 0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0xff}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x644002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:46 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'security.', 'lowerdir'}) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x40004001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2228.943092] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:47 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x305000) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)={{}, 0x0, 0x4, 0x0, {0x40}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xdbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2229.476997] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x9000000}}}}}, 0x76) 13:46:47 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:47 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000140)=""/75, &(0x7f00000000c0)=0x4b) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:47 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r4, &(0x7f0000002000)=@ethernet, 0x10) r5 = socket(0x11, 0x800000003, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000002c0)={{0x3, 0x6e}}, 0x10) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r4, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r7}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0600"}}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_delroute={0x2c, 0x19, 0x800, 0x70bd2c, 0x25dfdbfd, {0x80, 0x10, 0x14, 0x1, 0xfc, 0x1, 0xff, 0xd, 0x900}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_GATEWAY={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {r8, r9+30000000}}, 0x0) tkill(r0, 0x1000000000015) 13:46:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xe000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2229.763796] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xebc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:48 executing program 4: r0 = getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200), 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0xb02, 0x0, {0x0, 0x2}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)=0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x82000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r3, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}}, 0x0) r7 = socket$inet(0x2, 0x1, 0x69) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x6, @rand_addr=0x4672, 0x4e22, 0x3, 'wrr\x00', 0x11, 0x9, 0x61}, 0x2c) tkill(r0, 0x1000000000015) 13:46:48 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000140)) tkill(r0, 0x1000000000015) 13:46:48 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") fcntl$notify(r2, 0x402, 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:48 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000939ff4)={0x40000001}) epoll_pwait(r4, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:48 executing program 4: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000300)={0x401}) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x402c5342, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40d9) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) getpeername$l2tp6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x20) [ 2230.556568] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x11000000}}}}}, 0x76) 13:46:49 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x420041, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000280)={0x6, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)={{}, 0x0, 0x3, 0x8001, {}, 0x0, 0x2}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:49 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xf000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:49 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) setns(r1, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2231.206596] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0xfbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:49 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000140)) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:49 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {0x6, 0xff}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}], 0x2, 0x2) ioprio_set$uid(0x3, r3, 0x3) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr=0xd5c, @in6=@remote, 0x4e20, 0x5, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x1, 0x0, r3}, {0xfffffffffffffbff, 0x2, 0x83a, 0x9, 0x9, 0x6, 0x7, 0x4}, {0x10000, 0x8001, 0x6, 0x3}, 0x12, 0x6e6bbd, 0x0, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in6=@rand_addr="d9caba016b8ca0441d53bc23d8b8cbe5", 0x3502, 0x2, 0x1, 0x5, 0x1f, 0x9c, 0x1f}}, 0xe8) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r6 = dup3(r2, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r8, r9, 0x0, r9}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r10, 0x81}) sched_rr_get_interval(r10, &(0x7f0000000280)) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f00000000c0)) 13:46:49 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000140)={0x2, 0x7, 0x4, 0x4000, 0x4, {0x0, 0x7530}, {0x1, 0x0, 0x1f, 0xb0, 0x80, 0x0, "b5020111"}, 0x1, 0x1, @planes=&(0x7f00000000c0)={0x7136, 0x1, @mem_offset=0x10001, 0x52}, 0xffffffff, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) tkill(r0, 0x1000000000015) 13:46:49 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) open(&(0x7f00000000c0)='./file0\x00', 0x2040, 0x22) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:49 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x1, @thr={&(0x7f0000000280)="7fd8ffe4678d74c93320c2bc8c1c04495fae485a69cef9bc09bd5d0d0a6acf6260e72ccb897b607d0127adb3f7e54ceddb7f0e1845df37374b2cda7206e64355b8ffaad5b02e712293ecf085c2e53f697df5f2f5c7a7a6536e4145a11ddfb97fb4901481614f37c591f4b67df7dd56b869bd57259c10048579e1b3ca07cc9345693837468e57c0661c554cb6ef864305d0265ff10594045c5d60283ee07dc99dd05c12cba29d90ab9ed43d91147fb5608195193528ee00a78a0c91f3b11dbe5a65033b58bc8a83912dfb90d32b2bf5260a944e8c", &(0x7f0000000380)="82f8a0a8cd45827b7258040bd18cbacc5a605dd351416cd08f95a15f567259cccebba265d2466abb9ada1866a64580aa8c07c723196eb8bdb5050af6d4cc7ce52246fb9398cd0dce56c2052553bfe2bdb924ec0b5b63b2f758336b1bd1cfbfb183449a312c7f3793af3184ab7fa79b811d36faf87b99d2bc9ade7c26f09607dea2ddd663cf460147c4cead50de878bb3e6956725d08b4ca3edac501ea79a95d7cf7d121666fb46a30def6f3e5187163c8fb21b936329f337fdc3f92aba8f71b97f940fdf4f97be4b"}}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2231.950692] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:50 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:50 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000080)=""/196, 0x20000144) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, r3, 0x0, r3}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r4, 0x81}) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x80, 0x2, 0x5}, 0x20, r1, r3, 0x0, 0x7, 0x245e, 0x7fffffff, 0x8, 0x8a88, 0x8001, 0x6, 0x2, 0x1, 0x0, 0x0, 0x100000000, 0x6e1f4952}}, 0xa0) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x20000, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@cache_none='cache=none'}], [{@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r1}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/seq\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) r5 = getpid() r6 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) write$9p(r7, &(0x7f0000000280)="dd1bc4460b66785a228aebf30953afa5221df28a67b0cea7ae5a4ad6b59804f8f8f49b75a407cd44e758b59d82ebc593b75a398b90d48586771eb4890ed0f2dbde52e1ccfcfa3c40720b3dc8653dd150315e764c394ee15d1230a87dde6f81148b2622dd844168b730b779c15c8d36943436bd78d013544b3607d20d148a7aa231070ab51bd2af6bf16d5c5b5191e01a5cfd8f22c935fe4d705ebfcf5b2f6e499bdba1ba2dbc6170a8c56efcbe970dfdd12f846288209ec0b50cb5be1c90f975af233638a5588d2b8292314553b857151a93", 0xd2) read(r6, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x80400) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800286c}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x3c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2ba}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xeaf}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, 0x84}}, 0x8844) r10 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x1000000000015) 13:46:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x6c000000}}}}}, 0x76) 13:46:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x10000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:50 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103a9bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851ceb4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) r3 = dup(r2) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x4, 0x99, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000280)=""/153}, &(0x7f0000000340)=0x78) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x1000000000015) 13:46:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2232.846091] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x10bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:51 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x8000) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:51 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x80500) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x20000000353}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e24, @empty}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:51 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0xd69, 0x4) tkill(r0, 0x1000000000015) 13:46:51 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) r2 = semget$private(0x0, 0x7, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000040)=""/44) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f00000000c0)=""/57) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) pause() tkill(r0, 0x1000000000015) 13:46:51 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, r5, 0x0, r5}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r6, 0x81}) sched_setparam(r6, &(0x7f00000000c0)=0xf06b) [ 2233.614263] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:51 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:51 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$NBD_DO_IT(r2, 0xab03) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x20010, r3, 0xffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000140)={0xff, 0x1, {0x2, 0x2, 0xffff, 0x3, 0x8000}, 0x8001}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x11bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:52 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, r3, 0x0, r3}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r4, 0x81}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, r6, 0x0, r6}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r7, 0x81}) rt_tgsigqueueinfo(r4, r7, 0x26, &(0x7f0000000140)={0x2a, 0x1000, 0x8}) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x800e0000}}}}}, 0x76) 13:46:52 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x3, 0x2}]}, 0xc, 0x2) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) pipe(&(0x7f0000000340)) tkill(r0, 0x1000000000015) 13:46:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x9]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2234.560807] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:52 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x12000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) r6 = accept(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000280)=0x80) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x40040) 13:46:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x20000000114, @tick=0x4, 0x0, {0x8}, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x404c534a, &(0x7f0000000000)) write$sndseq(r0, &(0x7f0000000580)=[{0x4, 0x51, 0x0, 0x9, @time={0x3, 0xf238}, {0x3, 0x6}, {0x3f, 0x7f}, @queue={0x5, {0x8, 0x7d0}}}, {0x3, 0x8, 0x3f, 0x5, @tick=0xd76, {0xe, 0x1}, {0x40, 0x5}, @quote={{0x7, 0x40}, 0x0, &(0x7f0000000300)={0xfe, 0x80, 0x7f, 0x81, @tick=0x4a99, {0x8, 0x3f}, {0x4, 0x6}, @addr={0x1f, 0x9}}}}, {0x99, 0x3f, 0x83, 0x9, @tick=0x1d2e, {0x5, 0x3}, {0x9, 0x4}, @raw8={"6879e657e4f82770a7771b13"}}, {0x7, 0x0, 0x12, 0x9, @tick=0x1, {0x3f, 0x8}, {0x7f}, @control={0x7, 0x2, 0x8001}}, {0x7, 0x3, 0x81, 0xa5, @time={0x973, 0x9}, {0x3f, 0x80}, {0x0, 0x5}, @queue={0x3f, {0x2624, 0x406d}}}, {0x4, 0x1, 0x0, 0x7, @time={0x6, 0x1}, {0x7, 0x5}, {0x80, 0x1f}, @raw8={"45d954e3975ca65b6c4e4f49"}}, {0x9, 0x40, 0x43, 0x3, @time={0x20000000, 0x133e}, {0x10, 0x1}, {0xe0, 0x8}, @note={0x81, 0xf8, 0x0, 0x9, 0x800}}], 0xc4) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r2}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000015) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0x2}, 0x6) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, 0x0) connect$unix(r7, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") timer_create(0x3, &(0x7f0000000340)={0x0, 0x31, 0x4, @thr={&(0x7f0000000680)="a2cee57dde60c2ef3b04fb3084ac2890849affef0420e5413c9a949e4f2119a0427120f6adef248bd3a869180b78872081493570f65345333a38d69e20a5bb5a4cea697c513abb1d26a5052dd4e85a33e4f7e713", &(0x7f0000000700)="8ef8b69eb7456d0c34724575a9149681fabc5117cbdd692bfddfdd89c81c6529c1a04e5b89b02bbcc5d7b2ba515bf9f1e3d978cd6b45c58740406da1674f5e1ea145ada30fbc5f2649d8e981f714326f1164e60870f1ac04e75aba5dcfe32dd7773c363298b297f172eaa7597aeaf6b1bbc8ecd8c9c7ecfd2c3cb351741bfae40b00c9975213"}}, &(0x7f0000000440)=0x0) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) timer_settime(r8, 0x0, &(0x7f0000000800)={{r9, r10+30000000}, {0x0, 0x989680}}, &(0x7f0000000840)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010c5c641e0bd7000fddbdf2508001500030400000800030000000b000800010044a13229c05092ef486126990200000708004c00000000000200000008004c00010c00000800150002000000e3a7f51d3694ef35cd766351ffffffff000000006cfabe9cdeb2d1e398bd3b09f69ed0ec7e985f79b8bd4e5fd70d1444fd43410f1a6ab29353f618c7ab3b0c61fddb430300000021f77fa40b7e9409c2f4ebaa33e68cb99f96cdd4f86fb76d4007c46e416e7e2f8f5ae2e799af37e3d000"/204], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x1810) 13:46:53 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:53 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x200000) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)={0xdf68, 0x7}) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000440)={0x0, 0x21, 0x1, @thr={&(0x7f00000008c0)="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", &(0x7f0000000380)="c787f8578f7185a95f7b99474f790030d2df735bc85d90420cc65e774f5bb475640852db761871f79039eda46692c6df170a7d30631a76f66da56478ad3a59d23f0f6a77a17f768928ae6d2b5712bc1ffeb1dc091a2b99e2f5165af39d77b1208d4c1b6d40186f39c2a19fb20fbbe80bea1aa63e489fad9d524baff9d664b90ac820996d703bb031"}}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000500)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000540)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$AUDIT_SET(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x3e9, 0x209, 0x70bd2d, 0x25dfdbfd, {0x4, 0x0, 0x2, r0, 0x4, 0x9, 0xffffff01, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x40054) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) times(&(0x7f0000000580)) 13:46:53 executing program 0: r0 = getpid() r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x5, 0x8}, 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x516801) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r0, 0x1000000000015) [ 2235.549286] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:53 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={0x0, @in={0x2, 0x4e23, @loopback}, @l2tp={0x2, 0x0, @remote, 0x2}, @rc={0x1f, @none, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfff, 0x8, 0x401}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:53 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x401, 0x10001}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2236.064124] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x8dffffff}}}}}, 0x76) 13:46:54 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:54 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = accept(r2, 0x0, &(0x7f00000000c0)) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x6) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000380)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000005a00000428bd7000fedbdf2500080001000200000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB='4\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x200008c1}, 0x44091) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:54 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xfff, 0x101c0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r8, 0x37, 0xc6d, 0xf58}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x12bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x11]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2236.560250] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:54 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000003c0)=0x5000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x7}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7f}]}, &(0x7f0000000380)=0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) getsockname(r5, &(0x7f0000000140)=@isdn, &(0x7f00000000c0)=0x80) tkill(r0, 0x1000000000015) 13:46:54 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000000c0)={'vxcan1\x00', {0x2, 0x4e23, @rand_addr=0x2}}) tkill(r0, 0x1000000000015) 13:46:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x13bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:55 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x6, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f00000008c0)="a4ec3865e8ed6e0183affcd0453df6dd1e4c29544e6a3538112b11790178793a786b5a820a31e43e7217ab555367a30d520d70c49ea2bf6b9d0caa9d041676a180ff8181ffb1b5049b0fd1e6b03b5adb7d70e087487be730a6b33dcb694c0e3a9ab5d4b7d32e91a0cc8da3ae48b1527a52cc5b28ad2b6ad50ffed2d47543bd5385da5a3f7d743d52ba536be5535bb7fc056acda447ac435a3aa51439ef15d01deae93efa132ae2d7e6f3295c28575bbb7922f65b7d57e7cf8482c61b8fb5263924ef5fee6417cf2bd38e1ebf75efa1ed902059d2e1371875a957ed47816d76877c929a7e0555623c88c22d6f365aac8fa4951ec08d1d6e7d26cdfc57ce647a51715ecec127f2ac3892e79c73884eedf1fef12de709e6ed770d974467c450008b562b6ea0cfcebb08c6949e14b854c26d9bc0093bda19567f21675cdef748371d395fb9d0e8becfde33ef2408021ef08f416f477f18e2ef5241e266e30f007aec8a028c3b645aeb03dd7117e99e194a856c7246e5883403ed7b720093c313426d88984afc21ed88aa8fa31cb086c0ff22011c07afd4d62a37f889c0c1a6a2940f32b208192e8a39b88cdaa25b98c64c411d23408e3f7709764665f2febccb895d9ddf30f58d1825d5c162b843038c6e75b2e335680ac481ba76b404ec5aae2cf59b09f7b028d2b72907e404e250e3194a41bfa16dcadf71853a197e486fff923edfb25dd59f31b59b6844efaddd6d61b76cb4063767a8d4503472828b1efd542caf99a6108c1909a39e1c39ae780c7feb2eb9c9a2e70373b2b7445daa74ccc6f293e5a1eef4d70e21376aea7051d55bd9c60a1e7f99351ca5b520df1c1b3908957b79d4306c86e373023eb2ac2005de9938b457dba69993fc2feeea18611753c2f1c7f451166c73750426c853fa6620947bf95de99fe15825b7394121c6fc617f21839e076089dbc647ca7071fc017e12801339519416bbe06cc9a60ba8a600e6f7f1da14bdd017d504ea133aaf0f46dc2af807dd21f7ee34d493372d86c0dff34f0d22b3dc48163c0ee29a574811aa316068ae3f5c6b2cf1cf1b1df4f82001043380b9b598acb657796375a79fcabb0b61d50dda2d86013a1e2f607f6204a785a7cba26a4e36d4a8df5332f87bbfeae54c086b8847a48eb2fa8b63bb1bef93fc7ec838cff8493ffc74e5b39304215b6b87b2a52f0b625534ee34c2b8d4cc27cd3795cc4572456eae8c5194686b092b0686a861de165afdf10a46a577fc209134c5a65427aa61a25a90ce03a26d2485ef82fb02cf6b6cec94dd6105bf9b328459f335c945a86ebf8c14dc42433fb78ba3ef6902b6e950dc1ca8adad807177ed09150c4f9eac8019985184b34425f22c6d593dd66348c0bd9247057dd64df17cce7574f528caaaa27dd7f143beee86e2e10f57bdf78a077f0fc5cea440fadc21dde36982dcca9624b9cc7176b5ba45621e27740ef92ca123fdbc6b613172292858eb91cb9af3535cc39dd772630bd0795968dc34ad2ed0f14b5ce33f8ca6a7b586ef44b9935bffce9596ff6eb49e3539d5bb1f3602ae6acf7915f32d2393975f3b1de5874461c1febd79dee1a025368493813dcc33ee4795a3210fddb265bf36db9f2db8eef81ffd9c0d43f41e837c0cbfee8e493c2a1d145a9fee78776f331718d424e9f6a7798d24ffc7d15695f70b4b6411b5627bc41375adf4f95e7c484c071dc4996f3ccdc3de5b5b59cd854f1126bd6ce8f5373f7d49873b9c145c79b41e344e8fecd0bc36c2b81059783c6e86f7c7d25d940923cf5ab719130aba50050464ad5f1d8165cec6d9363fa14179efa1f01dba17f285779183727d1e5cbb2b590f0289cbc9447728e8d0a51041b8065351f36fed92e1873157d405f924eac3c9678b9011f5450cff2ef63a879d51d915ef9d8416ff88f19db1b4f367d59f396d5575d5ceae65c148dc8a9acded4fa2c1102bbfb5cb62fc1dedd95d43a5ccbb2b5f24a71b6ac2ef74f65307597250a482e40bb5009286d2f72871fe100d17788a88265e4286691a893f52817c98ca9f9fcb7a53f559fcae7c58c280a623bcc442e0315727a7e9729fc7415d6467a84ed2af7fa2afc93abece2500d255ee1784d6cd12939257d99a0e188ade0a39e168371a371dfa59bc511323becff5aac0c77a2d91170603c9afe436f95c53c146f3f56d6764486d5d82777387b6b1182f8205ae40bb66970c1ec81536b7a21089298597e566d18c86d6be2d66a6f202bd867bc7471c3a97345f5f229b93f37f06ccd32124821a197454d2ced2363564be2ebc7e717a4ead2441bd0f2769aeac37be61e2646e0170d2627eb33ebc0cf716a88e52dcc5b208282599f45f3d68141e26240793d2d6eb5b0d4b5736e0ae0027d694c79d9f1100601c69f796259d4546ec34aabe280cac55e32f7c6d751513f805bc8453bfb4b658ba285a3a62a6dca74f467fac65466e3d8c94aea4f4c3239d83eeff686d9bcfc6d6cb11191f55d2fbd67265174fbdb06b3439fc90024d3e50fa3d5c042ec474e7e050dbf41464ecb60b2c8ce2f392ca163e5cd92f57d99b0d4e10b906d7a115303cddd2cd553c002a5640719635f2a61556a604b24b131bc5a75dd326d2368ec2488fce86dfe36089b54e4e25dc265e668e167836a54d43850b318180410380e73b2e080e7378ae54601fd939886dd424b5c4308c46c66ad891cd646b303846e7fa4b4e584ffdc4fd69fa81c2c9589390597d6ef9586153d8e88daf97a5c81bf75b3c4292be7dffd93dc6314bb49e99f1fecd1debfdfb3d7fb442a9808dd7716e9ebfba163a6364b6b916e843088b17b375a702b77e077398d2af6b27c8cf085eb282e7b6fd6613c82067f9b569ff21a2befe3c10292c6d4a865e98c359d527caf5738c7e0d9b18ddf0c5b7b0f987c1236339125c9b3821b0f8ec5de3099b7c3db5059e3694bf81e9e0fd905cb6a0dbd4ff61dea52344538500235305288dcc41236e31e2bc84f584fdc295f1212bf2dfd66c4d9e7b8aa42803e2e0652bdff00d4bc510d4896694377a7898e6c8af61025eafb6bfbf8ca831590e5f959f207af3eccafae82f564f935d28b3ca3dbcbe1ca628b1f54b51bb4b7931419dfc608cf3f07c1801ecd7681fac09b232b2be3d70c9290e78c7223c2e96bc37ac9a62c2daaf0df58799a932fbe196a71882fda9d4ec51fd7623327a0d450cf2aef511b33d4d6a063f1f922699bcda423dfdb32b16aa0ab8c864fe8eea5ce70598c669603e0bb69562ae6f73597e311dc1cf062b0af971e1029321941d9a74187664b0e07b4bbd74740277e071f77799c32978d908d164aa92f9b75d04d7e066fdf78667b2a0107bfdfbf53f29f7663aa2c3d9f9007a20ff332ffbd5f0c159c6c3b69512d32fb26162036840b0558fc4d4f8f6f52f6a25f468ad2474e248337f6f87dee09edf317c0bfbc0b6fe71cba595874636d099f17d45fc4a1cf7f0304f8601cb7f07ac75ae90d9acdb719ac7571dc35ac71b0a68b2bd4f305d73502d89f43632a5789fd23882f176779d4e6ff5c0196e86789ee09a3b4d0382c4c94501d750c8e5a41f3baa4d74e82fe307c6cebb0689a20cbabb635fa0726a0e276c72e70519ab8652ec9c764664d8ccb08e33ba375f5b5e0c28a1925decee279c28b1aa984174c9cab3881c65f8d84e3482b721027c6355224d74f27c7510b220629f619232d68b8bb91aa8f90d807d6bd196cffd192826b0dc21a52a683fc58890299477eaa3ee74069f0dcf47d8c5b67809c04b77b8750d420efc9b2419389cb272ce707533ab34095b88272f0d54e0d890361062b3dfffbdd69f4f4e45b722c5d0ce2354875a3fcad339caf1cf1ab9852270b1f4aa5574fa142a1a7dd4de537a2d83fcb36813e01a3d3b24e467d7ece91352a3973504275591f70e99a7d0abae0495e09361734399c8c9929c96dfec7d103e940fe58cccd131f69e2f33a9154864cb1b927d9288d2bd503709911618da9f25a6428975b06165649983926e88e83acd1cfa3a0b6c01b03a3c90e7cfbd434133a84215611bc82aab4ee0051d5a2630ad33b5b9b1c0298d9484a20fcd8d63a09c14bd49809643817fa688f8dd6571695d395d5834dc463fd0149dc2bef6a651f99aa2f59c5f5509322f63657339cfef6e702bf2043381b710747b9610b035759c46497d040fdf9b55408533e53546d587bc771453f07bbbd2948f783d1d5d6794a71c55027a3efe03359fe290747f49d806c4c7da08d55d17925a2e296d184f2679f2e2d338d582eb5f98c7af0b6b589a3183361536a3608cb7c598199c50448cdb1663fb64c0dfc414af9487103b031109131791017b610aa279a0ce706c662826e3ad87fa3b900d81947ce244a1ced5574bbb2848e8e356db1020e1de7da8533ba272d9eb063dfd3ebe54b115bf1b91fb8ee6359dc6159e937ec30de429e13637d5c1736c24882e06efb13739004ba5b6c0449c6d33bac7e37e54a86b982ba1bd94bc645d7dd89cbc02c55ee7a851e93b0f6cc050e7726f2b07b199f5f1f1f1ead4811552a7733386842eb6724f9708cf1dd508be2a879562c1029fb6cb16d2a0e59dc5301220e53ad45501cd47f1df7f4a0ac909194ccd4b0d6498087d3f944fbe3ad51c16d1f83cac93cbdce0e7bf9bac9d17dc935eaa1a6deda7879ba269fde46335d30d43b0dbfd7cbade6d1f67e16370a3c638faa9b6e3c94d0d32acb505b4698b8c15a57c877658f4499eef63dc8ff68ea13876b4f1e96b68cb58f4716d8d50e27ed9dff1f082e1cc8fe31389e79d16b573b4cfcf9ad59e402e25fdafa1e01ab206cebcb4cec727d95549f5fdc9b4674a462a74c0379806c911d925f1e83f35f4fdd297534a76eddd91a665479cf7a028660db8152ca4d183a228dbf92b517187887a93c04f31250cbf269f24a6a485413edf3bf8d69651bc1a12ecabc6189e6b4c3faa2e1d5a9e68102029502ff8197a0b6fe23583fc924ba71e418c8274e66a1f124c7b31b1819e67f8ecb0bf42c36d56d3274573d2bc4400527d2d0919b1adf778e99e2f4d5222ee5d225fe1123853b18edfd73f533a9a174501c6833665ebe1c43b2f4998733dcd560ab27acd8e7160e92d38d7b6a0c50d98c46955be622e632423d64cb99876d424f325f5a4a28786df6697b6889c7d1dd370ef9f4b987b765278e47f2e5cae7c323707c3b9711c2d68d85e2e6f969845bc711be1773c6285d637f654b37b4a6bdfaf7d3da4687ddde02873646b57cb5b39faa1ea0ed08b2fa40af6d48156e642bdbad68812860e4d9e19273e133e0a36a15dd7fa6818f265c70e42e788cd8bbc65b8a26b0ab50b9e07078dad72030a003cc1e6e4ec5d76f7e40c9e37485b7af4f8087d9cee34375292817783e34a778f58ead78540571615ca07aec9a2892f94985a4c4bde216fd87f0d4b6032ed09ee052fc2447fd76865d27319ab945508e2092580108e006f052e92873dae307cbb0dea5a71b4a3ab8832e16ae46b817ca5f4585f15f3d63ec2c1cf3e443a612011768df00a58da7594c98f419533427aea3c3a515210ee5eb370fc2ec7487c6ae128e73dbb2c44fe32d3e560d58664e036351f4dabd705dd9bfc8a29dfc01c46a25f511d0a8e86e757bdd219f64637e6ae6ec2e13e00c4433ffe74a5cc72c1850c3f6d5cb6a3c48cdc0952e8ef66ec94532b9f268c61b35e1dda8745dbed51df64e157a1e2a1ffb2de365a52049a5095b166835ddd8514c483affa394309cbfea3cff234ce0d75bdb2e552d0a8a8ef0a9d2f", &(0x7f0000000140)="0b8295f550c3dd441b5ea44280432065ea496eaf82ad2ba6fe9afe2917555fbb5df9e3d84707f7163ee0fc272495a7f4f7f8208151a9c338be4c9874a8beaa9d3422fa7eaf77553da1af82ce23226178c7a0ceb6ab60fe8c965d4f7e34d56e0242ab8b0473a1cf95d0cd5ac0ec02be88b8fbd023ef9f45c73a8649c0"}}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:55 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick=0x8a}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:55 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r3, &(0x7f00000017c0), 0x375, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000003c0)={0x10, 0x1, 0x31}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, r7, 0x0, r7}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r8, 0x81}) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="6802bed3d7e2", 0x6, 0x7c6}, {&(0x7f0000000280)="0dc6bd5589a192c454ba1e5d622dd77b3a96b8e2f3", 0x15, 0x8001}], 0x300081, &(0x7f0000000300)={[{@user_xattr='user_xattr'}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x65, 0x51, 0x35, 0x37, 0x0, 0x36, 0x30], 0x2d, [0x62, 0x33, 0x31, 0x35], 0x2d, [0x39, 0x30, 0x61, 0xe], 0x2d, [0x34, 0x32, 0x62, 0x63], 0x2d, [0x54, 0x31, 0x33, 0x64, 0x39, 0x0, 0x39, 0x64]}}}, {@smackfshat={'smackfshat', 0x3d, '-+cprocvboxnet1][(#+security$em0'}}, {@euid_gt={'euid>', r6}}]}) tkill(r0, 0x1000000000015) [ 2237.604552] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:56 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200082, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000140)) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000740)={{0xf000, 0xf000, 0xb, 0x5, 0x7, 0x0, 0x3c, 0x1e, 0xf2, 0x81, 0x9c, 0x5}, {0x10000, 0x1000, 0x0, 0xf, 0x5d, 0xa, 0x7, 0x1, 0x0, 0x1, 0x8, 0x7}, {0x3000, 0x0, 0xe, 0x80, 0x1, 0x9, 0xff, 0xd1, 0x1, 0x2, 0x3, 0x7f}, {0x2000, 0x1000, 0xd, 0x7, 0x7, 0x93, 0x2, 0x1, 0xf8, 0x2, 0x3, 0xfd}, {0x6000, 0x5000, 0x4, 0x3f, 0x5, 0x56, 0x3, 0x80, 0x4, 0x7f, 0x2}, {0xd000, 0x4000, 0xe, 0x43, 0x1, 0x3, 0x81, 0x0, 0x7, 0x1, 0x80, 0x56}, {0x3000, 0x1000, 0xf, 0x5, 0x2, 0x1, 0x80, 0x40, 0x8d, 0x3, 0x0, 0x2a}, {0x2000, 0x10000, 0x8, 0x80, 0x12, 0x0, 0x1f, 0x3, 0x81, 0x2c, 0x2}, {0x4, 0x2000}, {0x5, 0x4}, 0x2, 0x0, 0xf000, 0x2400, 0x9, 0x401, 0x0, [0x3, 0x80, 0x6, 0x9]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r5, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffff0d) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400004ba9e1948ae00b3c3fc2b009cd3b769c8888f0da52679364b682f5e0fc76fb15ad0796074eac66", @ANYRES16=r6, @ANYBLOB="200027bd7000fbdbdf251900000005001c00860000000500a30000000000080001000300000008000300", @ANYRES32=r9, @ANYBLOB="06006d008100000005001c0007000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4040065) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="080000007000fddb045c847c244255fe775d3849df250e00000004001601"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40014) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r11, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r11}}, 0xc) tkill(r1, 0x1000000000015) 13:46:56 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xeaffffff}}}}}, 0x76) 13:46:56 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x14000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x60]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2238.205150] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x14010000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:56 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) tkill(r0, 0x1000000000015) getsockname$ax25(r3, &(0x7f0000000140)={{0x3, @null}, [@rose, @netrom, @null, @remote, @default, @rose, @bcast, @bcast]}, &(0x7f00000000c0)=0x48) 13:46:56 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340)="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", &(0x7f0000000140)="ffa17f8af5fe362259f2006f6ef871dc353dc305d936c5453e9981529621341477e70c5373ba6436c35011688d4dca4443"}}, &(0x7f00000001c0)) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0xe, 0x14, "4b48f876285a0902dcf05dc39ae4d855f0c0628da9180e762e4ecc9b367deb866f4db430d26d5a20367af976bfa31f09f843cbce0251d86292f99374fb40e146", "8334cc1dd250fa81a4d99576341f292ac87fa470f0bd711bd74e4e884a5b26a8b25abbef8b155a84522a863c7a75fb63ba1779747ff76e5ed3967124e83d4107", "b409000000000000004173fb9b1477f538952862684800", [0x800000000004, 0xff]}) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000280)={{0xf8, 0x4}, {0x81, 0x6}, 0x4, 0x3, 0x9}) tkill(r0, 0x1000000000015) 13:46:56 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x48, 0x1409, 0x0, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:56 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x12) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={&(0x7f0000000280)="af35fc9e3cbebfdfac0614daa01a6521bbcf6f3227a32dd82fc0b2f0aa282b35fc64589aa9e70fbea5128ce9f22475a5a45e6623bef49e51c44c600d7ac0dd5ee4f6b4322c3e5a52a5bc2810e2f3c427d686f1b8a1e0457fa9d4fb6b0f5b6cc7d4264edcb91f00849a144dcf46fa380b4a98007f5f77649bb13a6824f1a3963d03afa0c76b97448a8f3fb7e6c86651b0ce5bbc583044daf66ade0cb82c6055a7c2362ecd372d85360803e922906c4413ed66e3f372dd9304", &(0x7f0000000340)=""/196, &(0x7f00000000c0)="617869b5bb5659a9c5eba1e2c0f3da7140af267f153afe7609a579d4", &(0x7f0000000440)="f02709bb94334b360ff8bd19036e8da1cca62b7d872f85bb3dd9ba8a5147aef0bab15566382980d307e3983553801b126b01420b6e6fc4c8badecef854e4a4b3fd70b42831dd1c66a7c56d717af8d8a75be4748e51d49ff86d24cc16b6989b4b827fe7f4acd71e6655053247e443293f3113a6ebc04443cd35645293469b3835628490c91f34dedaf7556fbf4386f3c40fab8dbd10de48938441e50274bdd3ae4b9472308ed033ee443e0551093ed703aed4c69204ee5e1670bb7b172cce422e101f5d5c9f27", 0x800, 0xffffffffffffffff, 0x4}, 0x38) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:56 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x1af, 0x7, 0x9, 0x8, 0x10, "090471fb1fe5d1422d3abc4178a799febd3506"}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x25) [ 2238.920265] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x14bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:57 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2239.644836] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xf5ffffff}}}}}, 0x76) 13:46:58 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x20080, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x8, 0x1}, 0x8) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x2000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) tkill(r0, 0x1000000000015) 13:46:58 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x2, 0x6}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x0, 0x4}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="020000006263602cc89566de8c5e5e0f1bf0ba066f5feeb94a94d0e0337c471011001d089bbc0b0a4c38f0cdf3c83eec770799e65f5e7530591eef08f0d71200a6427e2d7edaf00985d83ad8523f973aab9ba7fae058617bd2abafc7b04109bca856f4f66bd807cd091708e3c785b62313ecf37666007a9762efe7f6ffb1fb3151c107578015cf53a33641", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)={r8, 0x5a, 0x0, 0x2, 0x81}, &(0x7f0000000140)=0x18) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6c]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x15bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:58 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:58 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0xa000, 0x0) statx(r3, &(0x7f0000000180)='./file0\x00', 0x1400, 0x80, &(0x7f0000000280)) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_crypto(0x10, 0x3, 0x15) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0)=0x8, 0x4) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000340), 0x4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x8800, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000003c0)={r6, 0x0, 0xfff9, "8b0ee58e4ec10a74293d57819f439b93bd9672df5381c6bd9f4e48a4179e745e15fd5182cee6c70f9a54d537590db54d3fb61ca595e28b3d862ee248c0f0decce26d8a482f700cb5d5413a704e2e046cd06207c09d2833cb343e014a791e95889a9728997aa15d087b728626ce8ba1d2f5187ce5070bc11c12f0146e2854862c77d9a9400c59de384c1c5de2341eee0dd542a1c4d8cff0ee"}) 13:46:58 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={0xdb4, 0x9, &(0x7f00000000c0)=[0x4, 0x4a55, 0x1000, 0xfff8, 0x4, 0xfff, 0xfff, 0x6, 0xbd5], &(0x7f0000000140)=[0x7, 0xf70, 0x0, 0x1ff, 0x1, 0x6, 0x2, 0x1, 0x3, 0x7ff], &(0x7f0000000180)=[0xc7ab, 0x8, 0x8, 0x3, 0x6, 0x5, 0x7, 0x200, 0x7c]}) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x0, @time={0x200, 0x8007ff}, 0xff, {}, 0xfc}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 13:46:58 executing program 0: r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) syz_open_pts(r1, 0x100) r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:58 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x503000, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x27, 0x1, 0x2, 0x1, 0x3, 0x6, "0b1b992ee102e3baa65c40590f53c4184bd2622ad524bcc698732338c8de48c032a06f1d62dd15b8e4d763b58c8ea570cd7805de0200fc927640fdcc648a40", 0x1b}, 0x60, &(0x7f00000002c0)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000280)="aad261ea28350f6ebfdcf8ce0c2373aa0aa56136d52d929bdbcaaf890fa839fa", 0x20}], 0x2, &(0x7f0000000300)={0xf0, 0x10c, 0x1, "8d8774e453abfdcdadb7b79a3ab3f7d71935d8279afe5c9591f523e87cea1f4b0fd2a8b3dd21229a4b6df69afc5b7a18af41f90b5489838c01d1c5aa14b3de91f32a35c4d27b8d4aa69823f849bff3d3c4fb54ed23a27e03132ac5073f5b7ae5b8dde19db773fad3c3505a6ab5148793fa68c870c99a131e94478dc8b8decfe6caf04fc50e1f39a9fd41dc24ee813a5bd58376d7377ad271a14d133b098c33c6b8b8a6c21d8c3fd7414c3a67e9dd8e604d82ca37a351dead9e1610cd982576980fe8e80169d2fb73d370a5c602d80af08f66fcd6fe9b0c6cc11b44f17148f4cd"}, 0xf0, 0x80}, 0x24004001) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000440)) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) [ 2240.502997] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x16bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:58 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, r3, 0x0, r3}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x2, 0x1, 0x9, 0xb1, 0x0, 0x8, 0x8400, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3b2bf2d5, 0x2, @perf_config_ext={0x200, 0x6}, 0x2042, 0x1, 0x1fe, 0x0, 0x9, 0x9, 0x4d6}, r4, 0x10, r5, 0x3) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2241.131281] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xff000000}}}}}, 0x76) 13:46:59 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000140)='/dev/snd/seq\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00', r2}, 0x30) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x88c0}, 0x880) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x300, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x200}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x6cb}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) tkill(r0, 0x1000000000015) 13:46:59 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:46:59 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @tick, 0x0, {}, 0x5, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) 13:46:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:46:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x17bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2241.610934] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:46:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x18bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:46:59 executing program 0: socket(0x23, 0x2, 0xfc) r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick=0x10, 0x0, {}, 0xd0}) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000440)={0x0, 0x2, @stop_pts=0x7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) r4 = accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) fcntl$getownex(r4, 0x10, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x50080, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0xa6, 0xffffffff, 0x6022, 0x3, 0x6, 0x0, 0x1, 0x2}}) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000140)={{0x1, @name="087f980e537f8bf223d1ea7714cb958b9faa1d26c40039893e30d7aa85c23d9b"}, 0x8, 0x1, 0xf98}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r6, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000380)=0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:00 executing program 0: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x404c534a, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) mknod(&(0x7f0000000140)='./file0\x00', 0xc000, 0x6721) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x15b103, 0x0) 13:47:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) 13:47:00 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200040, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, 0x0, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xa) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r8, &(0x7f00000017c0), 0x375, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000280), 0x4) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r7) [ 2242.296903] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:00 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x19bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xffffff7f}}}}}, 0x76) 13:47:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020014000200009e870000000001000005000600200000000a00000000000000000500e50000070000491f0000000000000300000000000002000100c898990d00000002000000000500050000009f000a0000ff17000000000000000000000000001700000000000000b92ef98d6186"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x32f0460fe8298b6, 0x0) 13:47:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:47:01 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x99f, 0x80000) write$UHID_INPUT(r2, &(0x7f00000008c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$TIOCEXCL(r4, 0x540c) tkill(r0, 0x1000000000015) [ 2243.263575] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:01 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1a010000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:01 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x7a, 0x7, 0x8000}, 0x4) tkill(r0, 0x1000000000015) 13:47:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020409ed01000270fff8", 0x16}], 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0/f.le.\x00', 0x0, 0x0) 13:47:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 13:47:01 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x1}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000340), 0x4) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a1fffffff0000000000001400000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030adf040000000000000000020000000900010073797a30000000000900030008ffffffef00000018010000080a05000000000000000000020000090900010073797a3100000000080009400000001f0c00034000000000000000030c00064000000000000000016300074031f89bdca392603f50a1ed1022fd4fdc001539caa8e257a93cb2db63b18d2238b1bd9cf6990f7d539f2814a604430fd08d0ae155fcc300f651ffcfad72eb93434472800501a522b988ff0000006bf4cac4de710ed1d88da4017ed103c4bf10000900010073797a3000000000580007407dae3c28f8bf01de48c92893bc8f53915274ceb2851c6b4deaedb635bfdf07a4f14afa1f400246b551c27fdedb829c0d103a2301ba201272b3cae90d6341f5e4b5468370e203861399dd54b8b6677a9c8f171fb908000940000000010800094000000002140000001100010000000000000000000000000a2d6291959d8932c54cfda4fdf3e8cb9c8bb5f0a1c9f53ca70feadca68e49e9f00885aa4ea3fc9a9d929732b59d8b529c658b46b953ed8701d9e6fef74e9d2004012d92221cfad8038f71e9124521228605e829e422addf437e20ef45b181cb4e78917d69559d5f389b3d7d0d0ed098ff2d3c118ed10b04b64e37f9db2ac08cff030000f5858e5647cf5cc30ad90927a669ad74fa874060eae763f51c3f45463459c8b94787dbf67d87057777cb064c5fe5a654751f119c793a9f97848fa9287ad46b7f75727426aa408adb65284629f8497cb80341e1babe41f16b4d"], 0x18c}}, 0x0) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000000440)=0x4e3da4bf) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r7, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r9, 0x6}, &(0x7f0000000280)=0x8) r10 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000380)={r9, 0x96, "dcf07f9cd60410755f058715219869b0401e5d5a8bd54023b7664a5d0e21d618ea7e75908cac7b92108164639a7e2da53fba9c5092e68e7af0d95772b88c3c55090b8be37fdc4f3d8e4247ddb5811d12549fa23b828d4ad1e0ff2d390371d14636ca7cb59577cc42eef99d54b9abd0845a458fe8394683806cc009825f86ab7a7bc69bedadc178f0edcb2d931093c97cd6d268251708"}, &(0x7f0000000300)=0x9e) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) 13:47:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) [ 2243.960184] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:02 executing program 4: r0 = getpid() r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000340), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) getsockname$packet(r2, &(0x7f00000041c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000004200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000004240)=r3) r4 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r4, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @tick, 0x0, {}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x101ff, 0x2, 0x1, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r8 = syz_open_procfs(r7, &(0x7f0000000140)='oom_adj\x00') ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef5de0204b7084edf685658cb275a9ae8b99a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r8, &(0x7f00000017c0), 0x0, 0x100000000000) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={[], 0x14, 0xfff, 0x3, 0x0, 0x9, r0}) write$sndseq(r8, &(0x7f00000000c0), 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$MON_IOCQ_RING_SIZE(r9, 0x9205) 13:47:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x7e, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\t\x00\x00\x000\x00'}) 13:47:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1abc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:03 executing program 4: r0 = getpid() set_mempolicy(0x4000, &(0x7f00000000c0)=0x432, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:03 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xffffff8d}}}}}, 0x76) 13:47:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2245.074984] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:03 executing program 0: clone(0x2000000000200500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) poll(0x0, 0x0, 0x1ddf) tkill(r1, 0x9) 13:47:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1bbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:03 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x200000000bd, @time={0x21, 0x4}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:03 executing program 0: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000), 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x1) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setuid(0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280), 0x1033b) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840)={0x0, @rand_addr, @remote}, &(0x7f0000001b00)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, r2}, 0xc) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={0x0}}, 0x1) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000000059f210dd062f1721b1504c13541ff16537347cb8f292bad9ef78df0b5b95cd6b0b529e41e6a5038c622e3671b75725393c203350b4f5d4a626425f44b300a3a5075ea60800000000000000", @ANYRES16=r4, @ANYBLOB="000000000000fcdbdf2514000000040006800400068004000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x40010) creat(&(0x7f0000002440)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="2e22ce1bc438f7bcbb7c35b39fb5fdf11e9856aeb272f7b10b79e7f8739f70fc290d8e0d43be7bbc9595c8b5a5a7453abe2dc1bdb63dbdc83bb6da5587a7de78d16d299d91d912710967084fbdcea0eed4dee1de5bc765db6e6a702e", 0x5c, 0x0) 13:47:03 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4c854) tkill(r0, 0x1000000000015) 13:47:03 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2245.969664] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:04 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = getpgid(r5) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x5, 0xa, 0x4, 0x4000, 0xffffb4c4, {0x0, 0x7530}, {0x5, 0xc, 0x7, 0x80, 0x7, 0x6a, "bda5a621"}, 0x9, 0x1, @userptr=0x9, 0x7, 0x0, r2}) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r8, 0xa) r10 = dup(0xffffffffffffffff) r11 = getpgrp(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r12}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r11, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r12}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r13, r10, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r12}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r9, 0x0, 0x0, 0x0, r12}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r6, r7, 0x0, 0x1e, &(0x7f00000000c0)='vmnet0jselinuxvboxnet0wlan1+-\x00', r12}, 0x30) r14 = dup(r2) r15 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r15, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r15, 0x113, 0x1, &(0x7f0000000340), 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r15, 0x0, 0x2d, &(0x7f0000000440)={0x5, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r16 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r16, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r16, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r16, 0xc08c5334, &(0x7f0000000380)={0x800, 0x103, 0x1, 'queue1\x00', 0xfffffffa}) r17 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r17, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r17, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$ASHMEM_GET_NAME(r17, 0x81007702, &(0x7f0000000280)=""/189) 13:47:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1cbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:04 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x4}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ff00060000010100000000000000250000000300040004ffdeff07fd17e5faff06060400000000000000d8", 0x39}], 0x1) [ 2246.729714] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 2246.794435] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. 13:47:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xffffffea}}}}}, 0x76) 13:47:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:47:05 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1dbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x5, 0x100000000000000}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfff, 0x9}, 0x2000, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x6ffd) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r1, &(0x7f0000000040)=""/70, 0x46) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 13:47:05 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0xfffffff5}}}}}, 0x76) [ 2247.682195] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1ebc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x4, 0x8, 0x0, 0x1, 0x2, 0x6, 0x16c1befd, 0x35d, 0x40, 0x309, 0x6, 0x6, 0x38, 0x2, 0x6a1f, 0x0, 0x2}, [{0x60000000, 0x7, 0x8, 0x7, 0x9, 0xff, 0x8, 0x8001}], "2aea4263bfe9bb14dadd9c14cc7d60942133e365562902c9b9c9fb5036180defaa0124ca158d75d98f3c646a8b1858767a70830dc2e1ae6e3496c28ceafc9ed94aaad798821ed8537fb52483d3d113c2a742446abb2c8f9563c23eee67183a4eae45e538a7d30b2604aabcef", [[], [], [], [], []]}, 0x5e4) r1 = getpid() r2 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000180)=r5) tkill(r1, 0x1000000000015) socket$netlink(0x10, 0x3, 0x9) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "6360b64e287a61b3", "fec7e00d608cf9846cdfc69d5f13e6931078e10dae45b5cb481e0e95e52dab98", "2ba8f3ac", "2b636d8426a5c5be"}, 0x38) 13:47:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)={0x14, r3, 0x709}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:47:06 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000a7, @tick, 0x0, {}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:06 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000140)={{0x8a}, 0x0, 0xe419, 0x6, {}, 0xfd}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2248.295394] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) creat(0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x308, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fba1b80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cb9cef3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46fc5f23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31be3296}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x834f26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b426298}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb6d7c94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbcf0404}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10000}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bc8bb38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a68f8a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16a6b878}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d195b18}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x356f5988}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2da486d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13814562}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xe9d8537552a44488}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x148, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd666}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45cdccdb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcff5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ff4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe026}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x352e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x635fc575}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22bdd87a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbbb71c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b35}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x584a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e6489ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ca4ff11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1caf3e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70503c32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb378}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e00ca2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52ffb848}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3510}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ce6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27f2de13}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4faf9f53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6719}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dd32773}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb528}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37c3f947}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2640717e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39a0a298}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x20048884}, 0x4800) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000340)={0x4, 0x6, 0xffff, 0x9, 0x5, 0xfcdc}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x7f, 0x8, 0x9, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1, 0x8000, 0x0, 0x2, 0x5, 0x6, 0x4}, 0xffffffffffffffff, 0x0, r2, 0x4) perf_event_open(&(0x7f0000000480)={0x3, 0x70, 0x6a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x41981, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20000, 0x9, 0x0, 0x3, 0x7812, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0xf32d3b3b396472cb, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="04064ca065000000000c000000000000000000"], 0x16, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, 0x0) clone(0xd48d24434713bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:47:07 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x20100, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x5]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:47:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1f000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 13:47:07 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) [ 2249.319520] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000280)=""/199, 0xc7) write(r1, &(0x7f0000000140)="a2", 0x1) 13:47:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x1fbc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:07 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 13:47:07 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x30a4d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x88000005, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) 13:47:07 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0x7, 0xc, 0x4, 0xe000, 0x80000001, {0x77359400}, {0x1, 0x1, 0x0, 0x1, 0x3, 0x4, "61bc57a7"}, 0x5af82eeb, 0x4, @fd, 0xfff, 0x0, 0xffffffffffffffff}) write$selinux_context(r2, &(0x7f00000000c0)='system_u:object_r:syslogd_var_run_t:s0\x00', 0x27) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x0, 0x4}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x18c}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, 0x0}) tkill(r6, 0x18) 13:47:08 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x11}}) [ 2250.085033] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:08 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x3}}) unshare(0x30060700) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000280)={0x0, "a9078afe68bb300b6961e2384c84ada19c246f1e33e199d7524400fc5ec43e9f707623572948ad7cd50d2eebde54f7abcf084736da0963fbe046d61d0f95341b", {0xfffffffffffffff8, 0x2}}) tkill(r0, 0x1000000000015) 13:47:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x6]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:47:08 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x20000000, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:08 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x0, {{0x2}}}}}}}, 0x76) [ 2251.003997] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) 13:47:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x20bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:09 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket(0x1, 0x6, 0x1) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x1ff, @mcast1, 0x8000}}, 0x0, 0x0, 0x45, 0x0, "d70561d94cb2aa671eaf738c0b8fa05c46b50a55e4dae206e52a172bc751f2b2ebf9594bdb42c05ad51463177f04504ad4aa9526cb7374a44f3bd015d94d01685fbcfd1ddccabd313475ac92a31586c8"}, 0xd8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:09 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2040001}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2, 0x0) 13:47:09 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000140)=0x6, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:09 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x5, 0x6b) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r8, 0x7}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 2251.998810] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x21bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2252.493830] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:47:11 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:11 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{}, 0x1}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:11 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 13:47:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x0, {{0x3}}}}}}}, 0x76) 13:47:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x22bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) [ 2252.999055] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) accept4$inet(r0, 0x0, 0x0, 0x0) 13:47:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x23bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:11 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0xd8840, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000140)={0x0, 0xffffffff, 0x2, 0x10000, 0x5, 0x9}) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000ed, @tick=0xfffffffd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)={{0x0, 0x2}, 0x1, 0x80000000, 0x400000, {0x0, 0x77}, 0x0, 0xe6f9}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="69b327b1e15fe37f07fab1a8dc2e6bc8", 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad56b6c50400aeb995298992ea5400c2", 0x10) 13:47:11 executing program 4: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, r4, 0x0, r4}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r5, 0x81}) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, r7, 0x0, r7}, 0xb8fb, 0x0, 0x0, 0x8000, 0x0, r8, 0x81}) tkill(r8, 0xd) [ 2253.576220] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:11 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = syz_open_dev$vcsn(0x0, 0x5, 0x101100) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT_ANY(r3, 0x2, 0x14, &(0x7f00000008c0)=""/4096) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340), 0x4) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f00000000c0)={0x0, 0x6, 0x8f, 0xd4, 0x4, 0x548, 0x0, 0x3cf4, 0x7}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) epoll_create1(0x80000) ioctl$TCSETSF(r6, 0x800455c9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x24bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:12 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"/793], 0x1c, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = dup2(r1, r0) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 13:47:12 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5334, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 13:47:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x2f, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x9]}, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}, 0x76) 13:47:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "d867f8", 0x44, 0x32, 0x0, @empty, @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x88be, 0x0, {{0x4}}}}}}}, 0x76) 13:47:12 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x402c5342, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r5, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x7ff, 0x2, {0x3, 0x0, 0x7, 0x1, 0x9}, 0x10000}) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x4, @name="59654d76e0cee0ef55e0204b7084edf685658cb275a9ae8399a1c58f17274514"}, 0x8, 0x0, 0x9}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) tkill(r0, 0x1000000000015) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000002e0010002bbdf7ffffff000000000000", @ANYRES32=r7, @ANYBLOB="0f0005000e0004000100f2ff08000b000300000008000b0008000000"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) [ 2254.572700] netlink: 'syz-executor.1': attribute type 19 has an invalid length. 13:47:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x25bc0200, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x13, @empty=[0x14]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) 13:47:12 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80160, 0x0) fcntl$setlease(r0, 0x400, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 13:47:12 executing program 4: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000200000000000000e00000016", 0x31, 0x1400}], 0x0, 0x0) [ 2254.949259] f2fs_msg: 1 callbacks suppressed [ 2254.949278] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2254.949906] ------------[ cut here ]------------ [ 2254.985666] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2254.996491] WARNING: CPU: 0 PID: 27922 at fs/overlayfs/file.c:58 ovl_real_fdget_meta.cold+0x11/0x1e [ 2255.006253] Kernel panic - not syncing: panic_on_warn set ... [ 2255.006253] [ 2255.013801] CPU: 0 PID: 27922 Comm: syz-executor.0 Not tainted 4.19.105-syzkaller #0 [ 2255.021729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2255.031123] Call Trace: [ 2255.033758] dump_stack+0x197/0x210 [ 2255.037575] panic+0x26a/0x50e [ 2255.040798] ? __warn_printk+0xf3/0xf3 [ 2255.044845] ? ovl_real_fdget_meta.cold+0x11/0x1e [ 2255.049732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2255.055312] ? __warn.cold+0x5/0x53 [ 2255.058968] ? ovl_real_fdget_meta.cold+0x11/0x1e [ 2255.063837] __warn.cold+0x20/0x53 [ 2255.067421] ? ovl_real_fdget_meta.cold+0x11/0x1e [ 2255.072384] report_bug+0x263/0x2b0 [ 2255.076126] do_error_trap+0x204/0x360 [ 2255.080047] ? math_error+0x340/0x340 [ 2255.083866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2255.089545] ? wake_up_klogd+0x99/0xd0 [ 2255.093462] ? vprintk_emit+0x2a8/0x6d0 [ 2255.097459] ? vprintk_emit+0x1ce/0x6d0 [ 2255.101490] ? error_entry+0x7c/0xe0 [ 2255.105215] ? trace_hardirqs_off_caller+0x65/0x220 [ 2255.110260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2255.115134] do_invalid_op+0x1b/0x20 [ 2255.116314] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 8192) [ 2255.118877] invalid_op+0x14/0x20 [ 2255.129368] RIP: 0010:ovl_real_fdget_meta.cold+0x11/0x1e [ 2255.135196] Code: e9 b3 fd ff ff e8 ac bc 3f ff e9 fb fd ff ff e8 a2 bc 3f ff e9 15 fe ff ff e8 e8 1e 08 ff 48 c7 c7 60 f1 d4 87 e8 30 7f f2 fe <0f> 0b 41 bc fb ff ff ff e9 98 c6 ff ff e8 ca 1e 08 ff 48 c7 c7 60 [ 2255.154118] RSP: 0018:ffff88802b417ba0 EFLAGS: 00010282 [ 2255.159503] RAX: 0000000000000024 RBX: 0000000004048000 RCX: 0000000000000000 [ 2255.161757] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2255.166791] RDX: 0000000000000000 RSI: ffffffff81554f86 RDI: ffffed1005682f66 [ 2255.166800] RBP: ffff88802b417bd0 R08: 0000000000000024 R09: ffffed1015d05079 [ 2255.166808] R10: ffffed1015d05078 R11: ffff8880ae8283c7 R12: 000000000000a000 [ 2255.166816] R13: ffff8880455440c0 R14: ffff888045544138 R15: ffff888055da04f0 [ 2255.166850] ? vprintk_func+0x86/0x189 [ 2255.166875] ovl_read_iter+0x11a/0x363 [ 2255.166890] ? ovl_mmap+0x2f0/0x2f0 [ 2255.166907] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2255.166925] ? iov_iter_init+0xc6/0x1f0 [ 2255.166946] __vfs_read+0x584/0x800 [ 2255.166965] ? vfs_copy_file_range+0xba0/0xba0 [ 2255.166983] ? __inode_security_revalidate+0xda/0x120 [ 2255.167008] ? security_file_permission+0x89/0x230 [ 2255.200704] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2255.203580] ? rw_verify_area+0x118/0x360 [ 2255.203600] vfs_read+0x194/0x3d0 [ 2255.203619] ksys_read+0x14f/0x2d0 [ 2255.203638] ? kernel_write+0x120/0x120 [ 2255.209994] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2255.211438] ? do_syscall_64+0x26/0x620 [ 2255.211457] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2255.211470] ? do_syscall_64+0x26/0x620 [ 2255.211495] __x64_sys_read+0x73/0xb0 [ 2255.221848] F2FS-fs (loop4): Wrong segment_count / block_count (22 > 8192) [ 2255.224646] do_syscall_64+0xfd/0x620 [ 2255.224669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2255.224686] RIP: 0033:0x45c429 [ 2255.233799] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2255.238098] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2255.238108] RSP: 002b:00007f59cb397c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2255.238123] RAX: ffffffffffffffda RBX: 00007f59cb3986d4 RCX: 000000000045c429 [ 2255.238131] RDX: 0000000000000008 RSI: 0000000020000040 RDI: 0000000000000003 [ 2255.238140] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2255.238146] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 2255.238153] R13: 000000000000087b R14: 00000000004caed7 R15: 000000000076bf2c [ 2255.244760] Kernel Offset: disabled [ 2255.385448] Rebooting in 86400 seconds..