[?25l[?1c7[ ok 8[?25h[?0c. [ 86.837207] audit: type=1800 audit(1549549448.897:25): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 86.856392] audit: type=1800 audit(1549549448.907:26): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.875819] audit: type=1800 audit(1549549448.917:27): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. 2019/02/07 14:24:23 fuzzer started 2019/02/07 14:24:28 dialing manager at 10.128.0.26:42867 2019/02/07 14:24:28 syscalls: 1 2019/02/07 14:24:28 code coverage: enabled 2019/02/07 14:24:28 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/07 14:24:28 extra coverage: extra coverage is not supported by the kernel 2019/02/07 14:24:28 setuid sandbox: enabled 2019/02/07 14:24:28 namespace sandbox: enabled 2019/02/07 14:24:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/07 14:24:28 fault injection: enabled 2019/02/07 14:24:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/07 14:24:28 net packet injection: enabled 2019/02/07 14:24:28 net device setup: enabled 14:27:26 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x24, &(0x7f0000000080), 0x8) syzkaller login: [ 284.775846] IPVS: ftp: loaded support on port[0] = 21 [ 284.937776] chnl_net:caif_netlink_parms(): no params data found [ 285.014547] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.021091] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.029982] device bridge_slave_0 entered promiscuous mode [ 285.039726] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.046334] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.055046] device bridge_slave_1 entered promiscuous mode [ 285.090668] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 285.103020] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 285.135538] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 285.144226] team0: Port device team_slave_0 added [ 285.150751] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 285.159370] team0: Port device team_slave_1 added [ 285.166326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 285.175470] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 285.338360] device hsr_slave_0 entered promiscuous mode [ 285.593382] device hsr_slave_1 entered promiscuous mode [ 285.854379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 285.862118] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 285.896311] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.902953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.910375] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.917025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.934053] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.943928] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.049983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.064499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 286.078022] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 286.085018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.092928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.108838] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 286.115072] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.129722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 286.137446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.146233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.154674] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.161165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.177588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 286.191054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 286.199266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.208355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.217061] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.223576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.233221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.248216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 286.255330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.279664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 286.286837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.296096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.312922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 286.320310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.329366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.338567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.355415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 286.368796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 286.376235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.385068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.393537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.402123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.420502] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 286.426852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.458252] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 286.478613] 8021q: adding VLAN 0 to HW filter on device batadv0 14:27:28 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) 14:27:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f0c7"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.804852] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 14:27:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'bond_slave_0\x00', 0x1}, 0x18) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460000000000e2938e88ec3d0000000000000400000000000000000000000038000000000000000000000000002000000010000000000000000000000000000000000000000000000000000000000000"], 0x53) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001900)=[@in6={0xa, 0x4e20, 0x8, @rand_addr="392d18cfb4e90609a07bfab334065dda", 0x5}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0xffff, @local, 0x7}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0xff}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0xffffffffffffff01, @empty}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @loopback}], 0xc0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f00000005c0)) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000740)=r0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="250000000300000001000800000000000000000000000000040000f1000000006262720000"], 0x25) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x6001, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:27:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'bond0\x00', 0x200}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460000000000e2938e88ec3d0000000000"], 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001900)=[@in6={0xa, 0x0, 0x0, @rand_addr="392d18cfb4e90609a07bfab334065dda", 0x5}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x0, 0x0, @mcast2}, @in={0x2, 0x0, @loopback}], 0x58) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x3d, "b08a14649a2ac95b75493f4442494cc9892ede7d4191497e2ebba40d701403047a813e77f66baec73757460037314921761c8e7e046530c4c2e8596629"}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000740)=r0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="250000000300000001000800000000000000000000000000040000f100"], 0x1d) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:27:30 executing program 0: syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, [0x7, 0x0, 0x0, 0x0, 0x320]}, 0x2c) 14:27:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f0000000100)=@hci, &(0x7f0000000000)=0x80) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x400000b0]}) [ 288.143860] hrtimer: interrupt took 65488 ns [ 288.335534] IPVS: ftp: loaded support on port[0] = 21 14:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x11, 0xfffffffffffffffc}, 0x1c}}, 0x0) 14:27:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x40, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0xd, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 288.534968] chnl_net:caif_netlink_parms(): no params data found [ 288.636539] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.644213] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.652677] device bridge_slave_0 entered promiscuous mode [ 288.668650] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.675285] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.683688] device bridge_slave_1 entered promiscuous mode [ 288.719347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 288.732821] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 288.762794] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 288.771406] team0: Port device team_slave_0 added [ 288.778467] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 288.787045] team0: Port device team_slave_1 added [ 288.794698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 288.803739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 14:27:30 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) io_setup(0x3f, &(0x7f00000001c0)=0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x2) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x10) io_submit(r2, 0x1, &(0x7f0000000840)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="e6", 0x1}]) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) io_submit(r2, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r4, 0x0}]) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000129bd7000fbdbdf5153e3b80000000000024100000010001369629330bd3a766c616e3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) [ 288.877121] device hsr_slave_0 entered promiscuous mode [ 288.902816] device hsr_slave_1 entered promiscuous mode [ 288.953628] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 288.961232] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 288.990667] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.997199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.004316] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.010851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.102793] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 289.108947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.123733] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 289.150849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 14:27:31 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x3, 0x5}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={r1, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x7fff, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0xf}, 0x3}]}, &(0x7f0000000340)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x7400000000000000, 0x80, &(0x7f0000000080)=@broute={'bropte\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x1, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}, 0x199) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x5}}, 0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r4, 0x342, 0x30}, 0xc) [ 289.173701] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.194083] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.207089] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 289.253183] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 289.259338] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.286390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.296165] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.302737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.313621] kernel msg: ebtables bug: please report to author: Wrong len argument [ 289.336820] kernel msg: ebtables bug: please report to author: Wrong len argument [ 289.356577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.364870] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.371342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.381200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.416974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.426739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.438544] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 289.447486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.456640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.465317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.474081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.496585] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 289.505334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 14:27:31 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', r1}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000110007041dfffd946f610500090800040000000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 289.537686] 8021q: adding VLAN 0 to HW filter on device batadv0 14:27:31 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x3) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x2) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) socket$kcm(0x29, 0x7, 0x0) getpeername(r0, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) 14:27:31 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000480)={'bcsf0\x00', {0x2, 0x4e24, @rand_addr=0x800}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x6, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'bond0\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4840) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="a400000000042a0025bd7000fddbdf250c0000041257d556504d46fa170405ba11a1f4bb8462e0039fee8c65d447fe61d2d054e0fd96430defc4d5ca4f611b909d679cb881a8107f3509c3c051d577f23f806f9a9a5a74e6380709e7403c0000007f629035d2f689612ec9bce1bc9bdb8f1c1e1ec8df7767b9c2a8906df95e82f369aac1b1fc954594061a89953417962651866b00000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) fcntl$notify(r2, 0x402, 0x80000020) exit(0x0) fchown(r2, 0x0, 0x0) 14:27:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004440)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000004540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004980)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000004a80)=0xe8) getsockname$packet(r0, &(0x7f0000004ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004b00)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004b40)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000004c40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000004d00)={@mcast1, 0x0}, &(0x7f0000004d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004d80)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004dc0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000004ec0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004f80)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000005080)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000005440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005400)={&(0x7f00000050c0)={0x330, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x20c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x400c094}, 0x4040800) r10 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f044, 0x0, [], @p_u8=0x0}}) 14:27:32 executing program 1: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="58000000000000008400000008000000000000000000000000000000000000010000000000000000008000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000609a28032506890d4202206bfb861cceb8784e549a47a1426c04893b4524ae85926fae0e4cce9c"], 0x58}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6, @in6}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) 14:27:32 executing program 1: syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000001c0)={{0x3f, @empty, 0x4e23, 0x1, 'lblc\x00', 0x11, 0x2, 0x39}, {@remote, 0x4e24, 0x3, 0xd9d, 0x9, 0xae}}, 0x44) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r3 = socket$inet(0x10, 0xffffffbffffffffe, 0x200002000009) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0)=0x4, 0x4) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000300)="24000000070a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) 14:27:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x801, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40) ioctl$int_in(r0, 0xc0045005, &(0x7f00000004c0)=0x200026f6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000600), &(0x7f0000000640)=0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x334, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9da}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xade}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff7e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffffffffffff0001, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}, 0xe3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa620}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7173}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x60) 14:27:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x801, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40) ioctl$int_in(r0, 0xc0045005, &(0x7f00000004c0)=0x200026f6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000600), &(0x7f0000000640)=0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x334, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9da}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xade}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff7e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xffffffffffff0001, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}, 0xe3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa620}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7173}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x60) 14:27:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\x03\x00\x00\x00\xef\x00\x00\x03\xff\x02\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x06\x00', 0xc7, 0x80003}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) close(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x400, 0x2, 0x416, 0x3000000000000000, 0x0, 0xccca, 0x84001, 0x4, 0x7, 0x4, 0xfff, 0x5, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x2, 0x0, 0x6ef, 0x9, 0x5, 0x100000000, 0x8, 0xfffffffffffffff9, 0x3, 0x8, 0x3, 0xfffffffffffffffc, 0x3, 0x6898e15f, 0xffffffff, 0x7, 0x0, 0x3ff, 0x0, 0x400, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x10003, 0x4, 0x9, 0x6, 0x0, 0x1, 0xfffffffffffffff7}, r2, 0x9, 0xffffffffffffff9c, 0x8) close(r1) 14:27:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) dup3(r1, r0, 0x0) 14:27:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400000, 0x0) openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec705f2288a933d66593ae164c990a0028e6640c522b60bdfedb810dcfa16bf33733b7a8961f9ec26a783f8", 0x30) r2 = accept$alg(r0, 0x0, 0x0) read(r2, &(0x7f0000000bc0)=""/93, 0x5d) write$P9_RLOCK(r2, &(0x7f0000000000)={0x8, 0x35, 0x1}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r2, &(0x7f0000d43000)={0x0, 0x0, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1}, 0x0) 14:27:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000280)=0xfff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000002c0)=""/4096) 14:27:33 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x800, 0x7ff, 0xfffffffffffffe00, 0x80000000}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') lseek(r1, 0x200, 0x0) syncfs(r1) 14:27:33 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 14:27:33 executing program 0: unshare(0x24020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xffffff52, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000100)="f0ba19fb48efb5564b6885ccf325d44548d07299afa5d8787103f447bb55df141e04c20b76e276375b0713d2e79bd06e44ae9ae24d173ad92ed5c085a354265390da93e1a180cefb8181e453973f20eed49295e677aa718b8efeacc85b216964cc89d111301bbec52281c219c11734089bfd643ea6b6cebf", 0x78) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) [ 291.164014] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 291.349380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:27:33 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x6, 0x1a, &(0x7f0000000040), &(0x7f0000013000)=0x221) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000080)={'bpq0\x00', @ifru_names='vcan0\x00'}}) r4 = dup3(r1, r3, 0x0) close(r0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000000)) 14:27:33 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 291.913652] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000340)={0x6f, 0x7d, 0x1, {{0x0, 0x4e, 0x150b16f, 0x400, {0x0, 0x1, 0x4}, 0x2000000, 0xfffffffffffffffd, 0x3, 0x4, 0xd, 'selfvboxnet0[', 0x5, 'wlan0', 0x0, '', 0x9, 'em1self[%'}, 0xc, 'eth1&keyring', r2, r3, r4}}, 0x6f) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0}}], 0x57b, 0x2, 0x0) 14:27:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000ffe797820e19f6fa4d269a9949c3afd1dfac5dc18498ce137f2c96b720e03ed2018098c373ce71cb3a89766ac1e0910250ef7d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x3ffe, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1}, 0x8) 14:27:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9b) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x3, 0x1, 0x32d9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) 14:27:34 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) [ 292.647954] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:34 executing program 0: syz_emit_ethernet(0xc7, &(0x7f0000000040)=ANY=[@ANYBLOB="77b0e1efedfa0180c20000000800450000b9000000000002907800000000e00000011100907800000689358000081e84d84b2db57b8a0af02ad8c4fda114a6e1200fd51c7ac998963739081ac9863e00c3a144a00263209fd5d31366005e0fba973461c1a98f799e3d94a162efc1763146b22c169c07351b62a1c4bae8590f0bc322d3034fe9dd3e4c4584063a0f35b040fd90300fc409fce43787e45d5627492ffb4cfb282d780c688c3b7986dd839b15e48e2b8930f6dc3bb8490fc3ddc4bbed5116722aa50c"], &(0x7f0000000000)={0x5, 0x4, [0x400000000016, 0x19f, 0x2000000000000004, 0x100080]}) 14:27:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) close(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x113, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000340), r1, 0x40}}, 0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x340000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r2, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000040) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) unshare(0x110) fcntl$notify(r3, 0x402, 0x2) fcntl$notify(r0, 0x402, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x80000000) 14:27:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x11, 0x4) 14:27:35 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 14:27:35 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x9, 0x40000) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) eventfd(0x5) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @rand_addr="27bda98f9e4bc638fa04088909f4893f", 0x1f}}, [0x493, 0x4e, 0x4, 0x5c538131, 0x29a, 0x0, 0x800, 0xff, 0x5, 0x3ff, 0x70, 0x2, 0x6, 0xeb96, 0x10001]}, &(0x7f0000000000)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x4131, 0x8}, &(0x7f0000000200)=0x8) [ 293.363997] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:35 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000080)={0x17, 0x43, &(0x7f0000000100)="b5189be7d54c902b6728b2a7b5b95761d03cdebd9c75d896bec1715c867d3f8074570c126aea98a1f7db71770d382a5f5b981c15613a3cd626556ca776cd058822cd67"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000c7f000)) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000000)) 14:27:35 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000080)={0x17, 0x43, &(0x7f0000000100)="b5189be7d54c902b6728b2a7b5b95761d03cdebd9c75d896bec1715c867d3f8074570c126aea98a1f7db71770d382a5f5b981c15613a3cd626556ca776cd058822cd67"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000c7f000)) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000000)) 14:27:35 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000080)={0x17, 0x43, &(0x7f0000000100)="b5189be7d54c902b6728b2a7b5b95761d03cdebd9c75d896bec1715c867d3f8074570c126aea98a1f7db71770d382a5f5b981c15613a3cd626556ca776cd058822cd67"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000c7f000)) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000000)) 14:27:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffff80, 0x10040) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) write$P9_RLOCK(r0, &(0x7f0000001080)={0x8, 0x35, 0x1}, 0x8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x46010, r0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000010c0)='cgroup.type\x00', 0x2, 0x0) r2 = accept4$inet(r0, &(0x7f0000001100)={0x2, 0x0, @multicast2}, &(0x7f0000001140)=0x10, 0x80800) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000001180)=0x2) r3 = open(&(0x7f00000011c0)='./file0\x00', 0x1, 0x8) ioctl$CAPI_INSTALLED(r3, 0x80024322) rt_sigreturn() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001200)={0x0}, &(0x7f0000001240)=0xc) write$FUSE_LK(r0, &(0x7f0000001280)={0x28, 0x0, 0x3, {{0x7, 0x8, 0x0, r4}}}, 0x28) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000012c0)=0x6, 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000001300)) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000001340)={'\x00', @ifru_hwaddr}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl(r1, 0xcab5, &(0x7f0000001380)="f7e237345530c158ae5e5c49b1ba") ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80000000) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ion\x00', 0x200800, 0x0) accept$alg(r0, 0x0, 0x0) lseek(r1, 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000001440)={0x7, 0x4d, 0x2}, 0x7) lseek(r3, 0x0, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001480)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000001500)={0xa, 0x4, 0xfa00, {r5}}, 0xc) r6 = syz_open_dev$vbi(&(0x7f0000001540)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, &(0x7f0000001580)="7bb1dce8e7364681c3466a6a78765e3e2e87e798a96000916fdd3673df7710e2a2f10d8846716be00b32", 0x2a) 14:27:36 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000080)={0x17, 0x43, &(0x7f0000000100)="b5189be7d54c902b6728b2a7b5b95761d03cdebd9c75d896bec1715c867d3f8074570c126aea98a1f7db71770d382a5f5b981c15613a3cd626556ca776cd058822cd67"}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000c7f000)) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000000)) 14:27:36 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:36 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x10}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, &(0x7f0000000380)=""/246, 0xf6}, 0xac89}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/246, 0xf6}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/119, 0x77}], 0x3, &(0x7f00000006c0)=""/114, 0x72}, 0x8}], 0x2, 0x21, 0x0) r3 = open(&(0x7f0000002c80)='./file0\x00', 0x400000, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) recvmsg(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000007c0)=""/233, 0xe9}, {&(0x7f00000008c0)=""/171, 0x9c}, {&(0x7f0000000980)=""/103, 0x128}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/4096, 0xfffffffffffffe5f}, {&(0x7f0000001b00)=""/39, 0xfffffffffffffecc}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/48, 0x30}], 0x8, &(0x7f0000002c00)=""/7, 0xffffffffffffff4c}, 0x120) [ 294.156890] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @sack_perm={0x2}, @timestamp], 0x11cc51) [ 294.753656] IPVS: ftp: loaded support on port[0] = 21 14:27:36 executing program 0: unshare(0x400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000180)={0x0, 0x0, 0x2080}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000022c0)={'ah\x00'}, &(0x7f0000002280)=0x1e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x0, 0x9980}, 0xc) ioctl(r0, 0x10000, &(0x7f0000002200)="bcc34d5d0875b98153d4179d714827c897d4c741762ca83af9182d596ad0867c3fe01f58ba27970c82e7b2127d4b15462b14deb37df9dc9f330dc0d120be39dc233d2fc9e3af0c5d5c12d70aa9821c337be8157e3838933209a5d95416858f194bd770a6165d3d6ebbf2e96340f7c802ec0bf9a1714b9ace85fe5a15fb0feca3") ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)=0x8000) [ 294.998583] chnl_net:caif_netlink_parms(): no params data found 14:27:37 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:37 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4c00, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9b) unshare(0x8000400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x3fffffffffff, 0x0) [ 295.133317] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.139941] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.148479] device bridge_slave_0 entered promiscuous mode [ 295.180425] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.187226] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.195775] device bridge_slave_1 entered promiscuous mode 14:27:37 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 295.279642] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 295.329023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.396959] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 295.405660] team0: Port device team_slave_0 added [ 295.420696] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 295.429379] team0: Port device team_slave_1 added [ 295.436463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 14:27:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8, 0x1f, 0xb94a, 0xab6f, 0x4de}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0xfffffffffffffffc, 0x8, 0x2, 0x0, 0x1, 0x0, 0x4, 0x0, r3}, 0x20) close(r2) close(r1) [ 295.445964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 14:27:37 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 295.577402] device hsr_slave_0 entered promiscuous mode [ 295.623148] device hsr_slave_1 entered promiscuous mode [ 295.704034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 295.711627] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 14:27:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="92dd724b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2}, 0x8) [ 295.780675] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.787411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.794678] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.801289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.966831] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 295.973535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.988893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.004478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.016098] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.035115] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.056899] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 296.096900] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 296.103103] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.120624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 296.127978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.138121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.146464] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.153006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.170281] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 296.181537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.190516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.198869] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.205385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.223857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 296.238797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 296.251243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 296.264359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.273890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.283269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.293034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.305647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 296.321001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 296.333602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 296.343424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.353305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.364793] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 296.372017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.380420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.389522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.398253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.406605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.415360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.423733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.434546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.464557] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 296.489027] 8021q: adding VLAN 0 to HW filter on device batadv0 14:27:38 executing program 2: r0 = socket$inet6(0xa, 0x80b, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='\x1b.\x00', 0x3, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@mcast1, 0x0, r1}) 14:27:38 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:38 executing program 0: unshare(0x600) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x400001, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0xffffffffffffff80) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x490, 0x140, 0x140, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000080), {[{{@arp={@multicast2, @rand_addr=0x8, 0xffffffff, 0xffffffff, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}, @mac=@dev={[], 0x16}, {[0x0, 0xff, 0x0, 0x0, 0xff]}, 0xe08f, 0x6, 0x599b, 0x2, 0xff, 0x3, 'rose0\x00', 'yam0\x00', {}, {0xff}, 0x0, 0x283}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x8}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0xff000000, @mac, {[0xff, 0x0, 0x0, 0x93efb2f95fe5fdb1, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x0, 0x7, 0x3, 0x3, 0x9, 'veth1_to_hsr\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x1}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x1da, 0xb2fa}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x8, 0x35}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f00000003c0)='syz1\x00') 14:27:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, [0x2]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a80)={"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"}) 14:27:38 executing program 2: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x3, 0x6, 0x101, 0x1, 'syz0\x00', 0x7f}) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x810002, 0x11, r0, 0x0) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/186, 0xba, &(0x7f0000000100)=""/50}}, 0x68) ftruncate(r0, 0x8200) readv(r0, &(0x7f0000001440)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) 14:27:39 executing program 2: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x3, 0x6, 0x101, 0x1, 'syz0\x00', 0x7f}) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x810002, 0x11, r0, 0x0) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/186, 0xba, &(0x7f0000000100)=""/50}}, 0x68) ftruncate(r0, 0x8200) readv(r0, &(0x7f0000001440)=[{&(0x7f0000003300)=""/4096, 0x1000}], 0x1) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/12, 0xc) 14:27:39 executing program 0: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$P9_RREAD(r3, &(0x7f0000000280)={0x7b, 0x75, 0x1, {0x70, "fe8af7b927f5d790c275d5785672836ebdf827547f2f2113cbb2ea4898bd1373a8f7fb42d9339a4d3f45006d33ac424bf9451203869c4805f27bc5da76d8a406422ffb9cf334ede2376ef3bfa9ecfba780324ef55bab49f4b225e79c91e997c03cb2802e24880ee9ad4858e175f33148"}}, 0x7b) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') 14:27:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) 14:27:39 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:39 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x600000, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x265, @empty, 0x100}, {0xa, 0x4e20, 0x8001, @loopback, 0x5}, 0x1, [0x9, 0x8, 0x2b, 0x5, 0x310, 0x2, 0x6dc, 0x4]}, 0x5c) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) r1 = socket$kcm(0xa, 0x1000000000000002, 0x73) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) 14:27:39 executing program 0: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x3ff}}, 0x18) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x6}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$P9_RREAD(r3, &(0x7f0000000280)={0x7b, 0x75, 0x1, {0x70, "fe8af7b927f5d790c275d5785672836ebdf827547f2f2113cbb2ea4898bd1373a8f7fb42d9339a4d3f45006d33ac424bf9451203869c4805f27bc5da76d8a406422ffb9cf334ede2376ef3bfa9ecfba780324ef55bab49f4b225e79c91e997c03cb2802e24880ee9ad4858e175f33148"}}, 0x7b) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') 14:27:39 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x7, 0x1) write(r0, &(0x7f0000000080)="2f3ed1b5255feeebeac2949ffd0f5033cfe5c483beea52a6aa7313974728cc895d3431b1794e6113eb1716fb44714624261cc78c415ca8aa5e7163094668fc0175a24048d6c4ca8bd806fc7727a91ca99867", 0x52) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200002, 0x0) name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) socket$caif_seqpacket(0x25, 0x5, 0x1) 14:27:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000080)="162963e36acab6322a91671463b76d5ac131aba813b7c6d2cfdac9cd9db39d19f93fed0b777b862e6b2ce0f1abb0f7149fc60e0d3d917bf08bfa2140c6a07b00df5d4604a0f6432e52a9f361d954e7dc244a20a5446a2e3daad03d4f21e0291aacc6b17ea51e7dcbfdc0d2d5cb4e3c17c4972d161b2c9f4a262647b04477e6fb583c5a684a014a2e42bc739b5c7cec085b7f1f519da166", 0xfffffffffffffff4) 14:27:40 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@hci={0x1f, r1}, 0x2b) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x0, 0xffffffffffffff4d}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "85cd0fca3406c790"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2, 0xff00, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "75c27e48debaff7d6fbde8e7567cc8da19c1b2283ba3e412b76911de73684007638d876aed4481c82db3b3df7f839068aa88c5e9e10db22a6ac082b83fa0bf7d"}}, 0x80}}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40001, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) 14:27:40 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) pwrite64(r0, &(0x7f0000000140)="839eab012980ea957eecdbe60df3892f6de4cd7cdbb1d67e602d17b594760b4cf5183556464e1caf0057a6a75d112270eade8e2cc9fa268ba4dec76c2f65c5cc3712a40217d5f1bfd41a19f406d72f5fe00cc86163fe6df3aaecb1e8ad5f9f4299641b6237bbdae33b26e3e6c41b5379e46e608d7cf9111334d3f37c713692df5828ce6cee2e59b01a4f23338b1ce0946621b0cf2b84bf20b3568c5d832c8f8537ab1c237ceed929ff1b5320dac62c3fc45a6dc3489bd1850b1dca334402604b24867e4e53945bdaf9da498993baece4de", 0xd1, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:40 executing program 0: unshare(0x24020400) r0 = socket$netlink(0x10, 0x3, 0x4000000000000) getsockopt$netlink(r0, 0x10e, 0x5, 0xfffffffffffffffe, &(0x7f0000000100)=0xe) 14:27:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'eql\x00', 0x45ef6e60c400570e}) preadv(r1, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 14:27:40 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) pwrite64(r0, &(0x7f0000000140)="839eab012980ea957eecdbe60df3892f6de4cd7cdbb1d67e602d17b594760b4cf5183556464e1caf0057a6a75d112270eade8e2cc9fa268ba4dec76c2f65c5cc3712a40217d5f1bfd41a19f406d72f5fe00cc86163fe6df3aaecb1e8ad5f9f4299641b6237bbdae33b26e3e6c41b5379e46e608d7cf9111334d3f37c713692df5828ce6cee2e59b01a4f23338b1ce0946621b0cf2b84bf20b3568c5d832c8f8537ab1c237ceed929ff1b5320dac62c3fc45a6dc3489bd1850b1dca334402604b24867e4e53945bdaf9da498993baece4de", 0xd1, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x4, 0xffffff89}]]}}}]}, 0x3c}}, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) 14:27:40 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) pwrite64(r0, &(0x7f0000000140)="839eab012980ea957eecdbe60df3892f6de4cd7cdbb1d67e602d17b594760b4cf5183556464e1caf0057a6a75d112270eade8e2cc9fa268ba4dec76c2f65c5cc3712a40217d5f1bfd41a19f406d72f5fe00cc86163fe6df3aaecb1e8ad5f9f4299641b6237bbdae33b26e3e6c41b5379e46e608d7cf9111334d3f37c713692df5828ce6cee2e59b01a4f23338b1ce0946621b0cf2b84bf20b3568c5d832c8f8537ab1c237ceed929ff1b5320dac62c3fc45a6dc3489bd1850b1dca334402604b24867e4e53945bdaf9da498993baece4de", 0xd1, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 298.849582] netlink: 'syz-executor0': attribute type 4 has an invalid length. [ 298.872809] netlink: 'syz-executor0': attribute type 4 has an invalid length. 14:27:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0xda4a, 0x200000) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000640)=0xe8) r3 = getegid() r4 = gettid() r5 = getuid() lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)="c87a6860d8affdfdd477599a6a8c409be285a50a9c0c06fded6f48b43584c226a5ae1f7875159e922ad7d7584adc2d71", 0x30}], 0x1, &(0x7f0000000740)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x40, 0x20000080}, 0x4c001) get_mempolicy(0x0, &(0x7f0000000000), 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x2) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f00000009c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000100)={{r7, r8/1000+30000}, 0x17, 0x6, 0x3f}, 0x18) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000007c0)) 14:27:41 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="df2bccd49b94ff248bbb24384db20d3cff00a5304ac735dc0d74fd7431764ab215bc3e9389b17cc7cf3c6d5180a60a663505fb6ea3b7a08940d8d5b012fde9868a2a76a118575f2e621690e189527149a3f30258ce458e681d23d60d67308b2e942690416cd8ea787ec8a3fc09fa25116aa7c3889e65b1011279036851da8b0dbae606d037718c961e04b9458d778e3c0644bbea9cfc6034ae4228c63d59f9478e062d722b0d8b916d614f53ed976e321a2af71e2964617f211c0c562297563f1ba80ab1d9efc5c7fad96e227de5a902d76635a9f24e75068054d26dc8bfd73c7e"], &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x201000, &(0x7f0000000180)) unshare(0x28020400) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00') 14:27:41 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) pwrite64(r0, &(0x7f0000000140)="839eab012980ea957eecdbe60df3892f6de4cd7cdbb1d67e602d17b594760b4cf5183556464e1caf0057a6a75d112270eade8e2cc9fa268ba4dec76c2f65c5cc3712a40217d5f1bfd41a19f406d72f5fe00cc86163fe6df3aaecb1e8ad5f9f4299641b6237bbdae33b26e3e6c41b5379e46e608d7cf9111334d3f37c713692df5828ce6cee2e59b01a4f23338b1ce0946621b0cf2b84bf20b3568c5d832c8f8537ab1c237ceed929ff1b5320dac62c3fc45a6dc3489bd1850b1dca334402604b24867e4e53945bdaf9da498993baece4de", 0xd1, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:41 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:41 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) tee(r0, r0, 0xff, 0x0) [ 299.384363] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:41 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) pwrite64(r0, &(0x7f0000000140)="839eab012980ea957eecdbe60df3892f6de4cd7cdbb1d67e602d17b594760b4cf5183556464e1caf0057a6a75d112270eade8e2cc9fa268ba4dec76c2f65c5cc3712a40217d5f1bfd41a19f406d72f5fe00cc86163fe6df3aaecb1e8ad5f9f4299641b6237bbdae33b26e3e6c41b5379e46e608d7cf9111334d3f37c713692df5828ce6cee2e59b01a4f23338b1ce0946621b0cf2b84bf20b3568c5d832c8f8537ab1c237ceed929ff1b5320dac62c3fc45a6dc3489bd1850b1dca334402604b24867e4e53945bdaf9da498993baece4de", 0xd1, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:41 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r1, 0x4, 0x463fa) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0xf, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc, 0x200000000000000}]) fcntl$getown(r1, 0x9) 14:27:41 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) pwrite64(r0, &(0x7f0000000140)="839eab012980ea957eecdbe60df3892f6de4cd7cdbb1d67e602d17b594760b4cf5183556464e1caf0057a6a75d112270eade8e2cc9fa268ba4dec76c2f65c5cc3712a40217d5f1bfd41a19f406d72f5fe00cc86163fe6df3aaecb1e8ad5f9f4299641b6237bbdae33b26e3e6c41b5379e46e608d7cf9111334d3f37c713692df5828ce6cee2e59b01a4f23338b1ce0946621b0cf2b84bf20b3568c5d832c8f8537ab1c237ceed929ff1b5320dac62c3fc45a6dc3489bd1850b1dca334402604b24867e4e53945bdaf9da498993baece4de", 0xd1, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="010010000108c5754903d7c4bc0002000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001800"], 0x2c}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x4000) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="1c7f4a105d30c4d112362c1bedc1114d41f4e06535faff74953e40592c3221aac4a33b54587421e636a84add9e6f4a7a4376aa0d9299", 0x36}, {&(0x7f0000000200)="98324cec54014c01d9b8883b15f1c65e2871fe821391e3d619ec823ca7f831718f0aa51848bb2f9044227afc889c7d85584623ac11cc488e4e33ea35c660df4240ff4379cfa53c7ee778b460616f9480835930c058922894e3e43d6ab31893653dafceb6c39ed144a62f291302feda2334182f74af22a625c39574fe1548cc94d42252b39947135f71b82404b26bf7f6a6dbc2907930a75928101a343126b4", 0x9f}, {&(0x7f00000002c0)="e06bf014813121ce4228330f00b26c24d5d735e99c04d04aff5248f814cebf0a039b70eb512e846056d11c5c6335fdfef31cb3d200f4a435f162141812e211a9d258cf416c275f2fe58d438b33", 0x4d}], 0x3, &(0x7f0000000380)=[{0x80, 0x10f, 0x20, "ba1aa2facdd5fc0cfd98393bd208e2ade61b03672fbcfdcd775d600c9e5c3c47124f495e743b546138802aae34fe2ffb73ca160b7dfbd7825c709f22696c7493b2a7b721e575d87b235e737b8f2b5b92dd8931e5a10d30f5b42e4edc9429d6117b548fcba94bcf7db2008faa"}], 0x80}, 0x20044051) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004d00)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004d40)={'netdevsim0\x00', r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0x3, 0x0, 0xa1ab}) 14:27:42 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) pwrite64(r0, &(0x7f0000000140)="839eab012980ea957eecdbe60df3892f6de4cd7cdbb1d67e602d17b594760b4cf5183556464e1caf0057a6a75d112270eade8e2cc9fa268ba4dec76c2f65c5cc3712a40217d5f1bfd41a19f406d72f5fe00cc86163fe6df3aaecb1e8ad5f9f4299641b6237bbdae33b26e3e6c41b5379e46e608d7cf9111334d3f37c713692df5828ce6cee2e59b01a4f23338b1ce0946621b0cf2b84bf20b3568c5d832c8f8537ab1c237ceed929ff1b5320dac62c3fc45a6dc3489bd1850b1dca334402604b24867e4e53945bdaf9da498993baece4de", 0xd1, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:42 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c0000000000019078ac1414aa800000004404000004800000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50004ac38d44a200"], 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x5, 0x8, 0x100, 0x7}, 0x10) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180)=0x43c8848736d812a5) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x3ff, {{0xa, 0x4e22, 0x1, @local, 0xfffffffffffffffb}}}, 0x88) 14:27:42 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 300.167537] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:42 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:42 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 300.346037] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:42 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:42 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:43 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:43 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:43 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 301.157809] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 301.233999] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:43 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:43 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0x28}}, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001280)={@multicast1, @multicast2, 0x0}, &(0x7f00000012c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001300)={@remote, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2, 0x3f, 0x8, 0x400, 0x1, 0x3000200, r2}) unshare(0x26040100) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000013c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000101}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r3, 0xb02, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xd75c2609305f6e94}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001500)='/dev/video37\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000001540)='fou\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001580)=""/103) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000001640)={0xbb0000, 0x509, 0x100000001, [], &(0x7f0000001600)={0x990a90, 0xea16, [], @value64=0xc340}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001680)={0x0, 0x9c69ea1}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001700)={r5, 0xbd, "8de093f0db8cdee87b0502fa464731f131b6beed55edefd401396810074b8d840d6984ed8d29b74e8b6321d95d0020bfa486429a6863b8a6841185a70a94ba40cc0803f9e121420ac223c6b93607a2b85f0e40fa2a457406090a7ed540fb0cf911793ed926cdf5dd2c1cb64ccb49f5793352edb2072d94b813ef78b471a8aaee3031e53700b33b5b28bf7d210693cb80a3df0dfe18c5d60e044f7749654315c7f931a4ccbab109ee45117438146a02b8f57e2e2815f2e961d3771d3763"}, &(0x7f0000001800)=0xc5) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001840)=""/63, &(0x7f0000001880)=0x3f) r6 = msgget(0x1, 0xcab653b4c3422c67) msgrcv(r6, &(0x7f00000018c0)={0x0, ""/5}, 0xd, 0x3, 0x2000) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001900)) clock_getres(0x7, &(0x7f0000001940)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000001980)={0x8, 0x3436324d, 0x7f, 0x0, 0x3, @discrete={0x7ff, 0xffffffff}}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001a00)={0x1, &(0x7f00000019c0)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000001a40)={r7, 0x4}) r8 = semget(0x1, 0x0, 0x410) semctl$SETVAL(r8, 0x2, 0x10, &(0x7f0000001a80)=0x1f) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) getresuid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b80)={{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@empty, 0x4e24, 0x3, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0x0, 0x0, r9}, {0xffffffff, 0x5f2, 0xc817, 0x1, 0x2, 0x7fff, 0x4c, 0x2}, {0xf2, 0x5, 0x81, 0x3}, 0x6, 0x6e6bb7, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x3c}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x0, 0x400, 0x3ff, 0x9, 0xffffffffffffffff}}, 0xe8) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001dc0)={0x1e, 0x6, 0x66c, 0x6c, &(0x7f0000001c80)=""/108, 0x7a, &(0x7f0000001d00)=""/122, 0x25, &(0x7f0000001d80)=""/37}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001e00)={'team0\x00', r2}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 14:27:43 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:43 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:44 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:44 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:44 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 302.313337] IPVS: ftp: loaded support on port[0] = 21 [ 302.335955] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 302.393678] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:44 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 302.600761] chnl_net:caif_netlink_parms(): no params data found 14:27:44 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 302.708938] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.715494] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.723637] device bridge_slave_0 entered promiscuous mode [ 302.746420] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.753059] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.761065] device bridge_slave_1 entered promiscuous mode [ 302.837008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 302.876274] bond0: Enslaving bond_slave_1 as an active interface with an up link 14:27:45 executing program 2: r0 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 302.974879] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 302.983585] team0: Port device team_slave_0 added [ 303.003702] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 303.012406] team0: Port device team_slave_1 added [ 303.043513] protocol 88fb is buggy, dev hsr_slave_0 [ 303.049309] protocol 88fb is buggy, dev hsr_slave_1 [ 303.054524] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 303.064330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 14:27:45 executing program 2: r0 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 303.138660] device hsr_slave_0 entered promiscuous mode [ 303.173070] device hsr_slave_1 entered promiscuous mode [ 303.213586] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 303.220971] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 14:27:45 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:45 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 303.328236] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.335032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.342708] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.349256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.499024] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 303.591478] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 303.598221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.606033] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.619236] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.640120] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 303.670929] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 303.699897] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 303.706848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.714721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.729709] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 303.735966] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.752012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 303.759383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.768036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.776459] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.782971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.817848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 303.827357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.836343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.844526] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.850983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.871141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 303.879794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.899380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 303.906561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.924421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 303.931527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.940520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.955572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 303.965078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.973425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.982449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.999536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 304.012141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 304.021891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.030398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.038701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.047551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.064091] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 304.070155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.098587] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 304.126447] 8021q: adding VLAN 0 to HW filter on device batadv0 14:27:46 executing program 3: syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x6, 0x100800002004) 14:27:46 executing program 2: r0 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:46 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:46 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 304.377187] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 304.404099] protocol 88fb is buggy, dev hsr_slave_0 [ 304.409803] protocol 88fb is buggy, dev hsr_slave_1 14:27:46 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:46 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:46 executing program 3: mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4800002, 0x4831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) mlock(&(0x7f0000005000/0x4000)=nil, 0x4000) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x1) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2172, r0, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) 14:27:46 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 304.744315] mmap: syz-executor3 (11080) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 14:27:46 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:46 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) unshare(0x8000400) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xa0e1, 0x10000, 0x9, 0x3f, 0x0, 0x0, 0x102, 0x0, 0x9, 0x1, 0xffff, 0x8, 0x7, 0x4, 0x80000001, 0x8, 0x0, 0x100000000, 0x3f, 0x7f, 0x5, 0x20, 0x8, 0x4, 0x9, 0x6b3, 0x3000000000000000, 0x400, 0x100000000, 0x5a, 0x1ff, 0x1, 0x4b9d, 0x80000001, 0x8001, 0xff, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x3080, 0x1, 0x9, 0x7, 0x1, 0x5, 0x7}, 0xffffffffffffffff, 0x5, r0, 0xb) 14:27:47 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:47 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:47 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) unshare(0x8000400) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xa0e1, 0x10000, 0x9, 0x3f, 0x0, 0x0, 0x102, 0x0, 0x9, 0x1, 0xffff, 0x8, 0x7, 0x4, 0x80000001, 0x8, 0x0, 0x100000000, 0x3f, 0x7f, 0x5, 0x20, 0x8, 0x4, 0x9, 0x6b3, 0x3000000000000000, 0x400, 0x100000000, 0x5a, 0x1ff, 0x1, 0x4b9d, 0x80000001, 0x8001, 0xff, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x3080, 0x1, 0x9, 0x7, 0x1, 0x5, 0x7}, 0xffffffffffffffff, 0x5, r0, 0xb) 14:27:47 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 305.439385] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 305.523138] protocol 88fb is buggy, dev hsr_slave_0 14:27:47 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x14) close(r0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40000000, 0x80) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x3, 0x528}) 14:27:47 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:47 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:48 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x6b881d2e3a524e44, 0xb}}, 0x20) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r2}}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000240)) 14:27:48 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000001ac1414000000000079030100"], 0x10) 14:27:48 executing program 3: r0 = epoll_create1(0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80004, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r2, 0x30000000000000, &(0x7f0000000200)="d2df73bfcce48593b3987f8a1e16872b0634ccad9ef79432e43b9e813873bdd9d732d28e750fc2589c7c7deefe1c4c5650277885d163da47ff6f471ec9d21e1c124f63b109e40799770d0db0a0dcddc5a4b0f4c9431d938a92b6d087cbd9cfaa3d8c4d5b77db8bef074c76351bf5ce77f9741f2f6b9cb00502ed999ab6cbd5980127063da57dc68860cf689be8cc5a3b973ec7275dc9bc20654fbeee6800982c925e31d0b852dfb09e973b0c1bed48f96ecdc349d64db4460f4bb1e62097d49d39849db79225053399bcadbc24d79fe77c05a35196ca9308e5954579ae30d77ff059ad3578409c15632c1b473f10b9202133e590") ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000680)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000640)) 14:27:48 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 306.563292] protocol 88fb is buggy, dev hsr_slave_0 [ 306.563438] protocol 88fb is buggy, dev hsr_slave_0 [ 306.568921] protocol 88fb is buggy, dev hsr_slave_1 [ 306.573945] protocol 88fb is buggy, dev hsr_slave_1 14:27:48 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:48 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(0x0, 0x5, 0x8000000000000080) close(r2) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) [ 306.737826] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:48 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:49 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:49 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x20000, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120008faf7c536b93a1b2ea9000200"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000240)=0x40) 14:27:49 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:49 executing program 3: unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x285a4e2b45d3d027) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x800000000000000c, 0x4, 0x4, 0x100000001, 0x10, r0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000010c0)={r2, 0x0, 0x0}, 0x18) 14:27:49 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 307.615390] protocol 88fb is buggy, dev hsr_slave_0 14:27:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x20400) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffc0"], 0x2) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) 14:27:49 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:49 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 307.990184] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:50 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:50 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 308.257517] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:50 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:50 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="7f0ea89c3eec5d507fe7f77dbbde37503954d6d9afc980be09fe995fa7e7a3ccc4e5824f45a86232a7c1ac7ca67278c5b2c15b92f39587bf9077b770875703657892bf53206dccc4c1cbea39fb06a6473832a5b89023bac61f9695c603c23e5f1d88d89170465c22bf44507af1faca360bd7852288f8978c6723a3e717841eda6c45c9daa006d78f1b7e7843087ac1c799306ff1dfa773b20429192877a2a3e800627c00447842415fe776a5567a749d75ca09434df1dfa112c9827496a8ca39a6d3b5") r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x7fff) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x70, &(0x7f0000000380), &(0x7f0000000400)=0x4) 14:27:50 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:51 executing program 3: timer_create(0xa, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_getevents(r0, 0xffffffffffffffff, 0x3, &(0x7f0000000040)=[{}, {}, {}], 0x0) 14:27:51 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:51 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:51 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:51 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) [ 309.252599] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 309.275706] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:51 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:51 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000000140)=""/185, 0xb9, 0x0, 0x0, 0x2cf) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x4, 0x84b}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000400)={r2, 0x1000, "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"}, &(0x7f0000000240)=0x1008) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) shutdown(r0, 0x0) 14:27:51 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:51 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={0x0, 0x22, 0x0}, 0x10000000000000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 14:27:52 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:52 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @initdev}}, 0x0, 0x0, 0x0, "b3f6e19388359919e58f08854335bef777fb9e810d1d0af14bbe9f0ced29717b172ce5d1ac8beaf5ddb5747cd0edaa81eaa9538c1d7eca3205ef6ba1f6c0808d632a889589758e2bc13a074d1401dce4"}, 0xd8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9fdb5ee71f5da8bed87df047abb6ed37a22635bcf4ea79047c2bf4a751aa454c0d50d400d0cb3e6c9d6054de705735d8b888d6f313dcc32745b9c571038f59f00ba4d4119834559998f8023c664df4682376a73dc5f983892494f98be30172676fa2d1dea7569aec4d80367e62ce336dcea5", 0x72}], 0x1) 14:27:52 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:52 executing program 3: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x2, {0x3e85, 0x7fff, "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", 0xd5, 0x0, 0x8, 0xf8, 0xffffffff, 0x80000000}, r3}}, 0x128) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 14:27:52 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:52 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:52 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 310.475065] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:52 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f0000001d00)=""/4096, 0x1000) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, r1+30000000}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) [ 310.646284] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:52 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:53 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:53 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:53 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:53 executing program 0: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:53 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 311.543578] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:53 executing program 4: r0 = inotify_init1(0x80800) flistxattr(r0, &(0x7f0000000000)=""/76, 0x4c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000100)={0x1, 0x0, 0x100000000}) r2 = fcntl$getown(r1, 0x9) ptrace(0x420f, r2) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/proc/self/net/pfkey\x00'}, {0x20, '/proc/self/net/pfkey\x00'}, {0x20, '/proc/self/net/pfkey\x00'}, {0x20, '+\"(eth0'}, {0x20, '}'}, {0x20, 'system'}], 0xa, "0acbd8e06ad5d87d1a3bb2a57d0f325aee52a36eafb68d353a6a045e7ac4d36872b12fef773e3bd64e4e567fda1a1a345682bc62cf99014854d84f718c264191e964a0cceefb718961cfc51876b0f6472c303ac3648957c213c785473088829ef15e90e0aefc534c5cd68b64e799cfeaae1fe85a357e7f9eb8d9c132fa9fc31f14c80655abc7be68f3b53aa140bcafb7fc05326d00e72886818591f896b7aa40768e520764b9e8a8280a667d42004d6a4d631d9c05290aa1dc25000f53b5086515427565b465883da3fc2597741117c21a2cf41ec04bf84db6f617b215c8d4c285dbf78c0fece42c8903edc5fea89f7d95b96dfe77"}, 0x153) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000300)=0x1, 0x8) r3 = openat$cgroup_ro(r1, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000380)={0x5c42e619, 0x7905, 0x200000000000, 0x300}) clock_getres(0x7, &(0x7f00000003c0)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000400)={0x8}) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000440)=""/85) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000004c0)=0xfc) poll(&(0x7f0000000500)=[{r0, 0x1080}], 0x1, 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@deltaction={0xdc, 0x31, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x12, @TCA_ACT_INDEX={0x8, 0x3, 0xc95e}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x5, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xa, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x18, @TCA_ACT_KIND={0x8, 0x1, 'xt\x00'}}, {0x14, 0xe, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0x15, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40080}, 0x20048000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000700)=0x9, 0x4) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780)='/dev/zero\x00', 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000800)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f00000007c0)=[{}, {}], 0x0, [{}, {}]}, 0x98) ioctl$TCSBRKP(r3, 0x5425, 0x3) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f00000008c0)=""/92) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000940), &(0x7f0000000980)=0x4) fanotify_mark(r4, 0xe2, 0x10, r3, &(0x7f00000009c0)='./file0\x00') ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000a00)={0x5, 0x5, 0x6}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000a40), 0x4) ioctl$KDSKBLED(r1, 0x4b65, 0x1b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000b80)=0xe8) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) write$FUSE_ATTR(r3, &(0x7f0000000c80)={0x78, 0x0, 0x8, {0x6, 0x1, 0x0, {0x4, 0x20, 0x5, 0x8746, 0x6, 0x7, 0x8, 0x4, 0x3, 0xa6, 0x7fff, r5, r6, 0xe07, 0x5}}}, 0x78) [ 311.696667] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:53 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:54 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:54 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0xffffffffffffdffe, @pix={0x0, 0x0, 0x56595559}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f0000000000)="bf6ee55c10221433473faac8a66022a66ce7378351b4457e2da1c84fabef8200741764153af39be07d2bfee609ad32992de31e333e6cb1f53b8efb77b4082bb71d0d84870aa56d25a7060bdc", 0x4c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x1}, 0x8) socket(0x8, 0x807, 0x6) 14:27:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000140)={0xe, @win={{0x100000000, 0x30000000000000, 0x3, 0x8}, 0x8, 0x87, &(0x7f0000000080)={{0x4, 0xcd33, 0xb6e, 0x4}, &(0x7f0000000040)={{0x7, 0x0, 0x8, 0x4}}}, 0x5, &(0x7f0000000100)="f98536749d996c8ce1b7487d729840c25ab2fc"}}) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 14:27:54 executing program 1: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:54 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$packet(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 312.673774] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 312.711270] IPVS: ftp: loaded support on port[0] = 21 [ 312.803086] net_ratelimit: 1 callbacks suppressed [ 312.803101] protocol 88fb is buggy, dev hsr_slave_0 [ 312.803286] protocol 88fb is buggy, dev hsr_slave_0 [ 312.808451] protocol 88fb is buggy, dev hsr_slave_1 [ 312.813646] protocol 88fb is buggy, dev hsr_slave_1 14:27:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_ifreq(r0, 0x89fc, &(0x7f0000000000)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b}) 14:27:55 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$packet(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 313.001940] chnl_net:caif_netlink_parms(): no params data found 14:27:55 executing program 0: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:55 executing program 3: r0 = getpgrp(0x0) r1 = getpid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) r4 = memfd_create(&(0x7f0000000200)='\x00', 0x2) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000240)={r3, r4, 0x172}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x3) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r6 = memfd_create(&(0x7f0000000140)='\x00', 0x2) fcntl$addseals(r6, 0x409, 0x0) write$cgroup_type(r6, 0x0, 0x0) close(r5) r7 = dup2(r6, r6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="7e000000e7dfc1df0ab3fadd28f8b3c4a758119bf66ec48e19f48c9cf869be28f4dc1ad9a57166051f4f5096d5bedeff012d8a9d452c853ca276a0df840fea4d6de0813194686a34a695c2b13db3382b7ba68d53dc974f4a2d81deb2ffed1c09000000e70f5227f115ac2f02b55ba205f7b60558ac7c3e34ce63b315beae00000000"], &(0x7f0000000100)=0x86) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={r8, 0x8}, 0x8) [ 313.190379] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.197116] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.205242] device bridge_slave_0 entered promiscuous mode [ 313.269260] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.275866] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.283983] device bridge_slave_1 entered promiscuous mode [ 313.301976] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:55 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$packet(r0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 313.365748] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 313.404637] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 313.482181] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 313.490983] team0: Port device team_slave_0 added [ 313.554499] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 313.563241] team0: Port device team_slave_1 added [ 313.583934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 313.592133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 313.716617] device hsr_slave_0 entered promiscuous mode [ 313.773172] device hsr_slave_1 entered promiscuous mode [ 313.824012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 313.831478] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 313.903427] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.910569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.917673] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.924225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.941388] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.958923] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.091850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.104682] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 314.115971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 314.123371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.130964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.144704] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 314.150811] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.163992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 314.171155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.179718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.189134] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.195662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.210261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 314.224197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 314.236496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 314.249686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 314.257537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.266278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.274513] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.280989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.290602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.299854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.309299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.318283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.331928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 314.339252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.347995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.357196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.371515] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 314.378833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.387176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.404202] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 314.411312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.419750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.439701] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 314.445951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 314.471008] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 314.491202] 8021q: adding VLAN 0 to HW filter on device batadv0 14:27:56 executing program 4: unshare(0x2000400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x200001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000080)=@hci={0x1f, r2}, 0xfe70, &(0x7f00000002c0)=[{&(0x7f0000000900)="c637dcb27cb83c06ad1e6c67801230c73c9de680544742642e3cef2797cd89fe052c8275fd4a32c5a65061a721ea00dd208036c4ceb2c7ecc46fe398b28d2e434d127d2b463d3c55adc2ddf66eb453df5a75dbb87cdbe73ee92183b7da10858f4deb81aa52", 0x65}], 0x1, &(0x7f0000000640)=[{0xfffffffffffffded, 0x111, 0x8, "396558a2cfd2d701ff0683907a0e1b751abf44515696799dcc19d694464c63901a5b8e43de55b6b23ceb51483a499afba81d18b7b5e19318bfa80898edac2af75da20176a2728d29b2f822c6dcee0e322ad6dcac9fa27c26a3e904720e2b4099f48dfb4a99c02527847b38e36a060cf14c72a3dd70b5deabcfdbce198b"}, {0x28, 0x1bf, 0x81, "83c7813b0f2c5d0fb138fdb052bf894c9f7a7f"}, {0xb8, 0x0, 0x8, "7cb5c57494da2c49ca6b0fc2700afe26a8c85866d7983534614088cb70f1b3ef481afa54ca3f76bfe52b1cbc7009f7f459fb617285bb9b76b13bf84de8af1501e37bba42a6af1003fee3695969be94126eef5dc87767060e848d8507122977040dba173cc9c04f7953ee2e45589ed3a92c8c5d5692b864d8ef0f08028f0fef63fdad2e0895b56aab3f1f000000000000000000000000004165d7378569e09ca4348eaab98f6cabb7f7bc2f98e4eaf9efa8216ddd"}, {0x4b3, 0x117, 0x854, "26efbc7841178a052a96c290e3fb265f5367a2d309a10ba438f6e4818cf6cb7135bba18e3c3ccef0d5cdb2bfb184b70ee5f0740e5a9c5cf54c7f38519507de2d0271bea763d86a12195953f49939a77cfb059a1386c4f07977a350141aa42735a2886db15a1b8fc0b31067e5ccda19407754c5e5b8b2541bab947179af90e0e864b97f02b878364dd5e028bf3972c9d7d1953cf6c1de9875ad10a513c562e284b683d81397bb4c942b14443ed2a251103352e2077ef778b58d033fb0764dd0fa04db03ea902d8d46d95bb3ccac101a933dc7db97843d6fb4416368d91abf2e04cc3348a420101a"}], 0x268}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setns(r0, 0x0) 14:27:56 executing program 3: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6}, 0x10) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) 14:27:56 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:56 executing program 1: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 314.783204] protocol 88fb is buggy, dev hsr_slave_0 [ 314.788918] protocol 88fb is buggy, dev hsr_slave_1 [ 314.818135] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 314.857871] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:57 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:57 executing program 3: r0 = socket$inet(0x2, 0x0, 0xc098) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x86dd, 'syzkaller0\x00', 'dummy0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast, [], 0xe8, 0xe8, 0x120, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [], @local}}}}]}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffe}}}}]}]}, 0x228) 14:27:57 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f0000012000)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 14:27:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r5 = fcntl$getown(r1, 0x9) getpriority(0x3, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:27:57 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:57 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0x101000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x103, 0x0, {0x1, 0x0, 0x81, 0x1}}) mkdir(&(0x7f0000578000)='./file0\x00', 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0xb00) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0xd, @sliced={0xfffffffffffffffb, [0x100, 0x4, 0x7, 0x8000, 0x6f, 0x5, 0x9, 0xfffffffffffffff8, 0xd123, 0x4, 0x800, 0x800, 0x14bb, 0x4, 0x2b, 0x10001, 0x0, 0x2, 0x80, 0x5c, 0xffffffffffffffc1, 0x7, 0x2, 0xffffffffffffff75, 0x5, 0x8000, 0x9, 0x9, 0x6, 0xff, 0x2, 0x1, 0x7, 0x1, 0x5, 0xffff, 0x1, 0x4, 0x1, 0x2, 0x66a, 0x7, 0x401, 0x1, 0x1ff, 0x8, 0x7ff, 0x1], 0x2}}) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)='\x02\x00\x00\x00\x01\x00\x00\x00\x00\x00\xf4\xff\x04\x00\x00\x00\x00\x00\x00\x00', 0x14, 0x0) 14:27:57 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:57 executing program 4: r0 = socket(0x9, 0x5, 0x5) sendmsg$kcm(r0, &(0x7f0000001740)={&(0x7f0000000040)=@l2={0x1f, 0x100, {0x2, 0x81, 0x0, 0x6, 0x1, 0x6}, 0x3, 0x101}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="1d11fb6d78577b40e90224de08d020938b2d27393340f8d7e8a323a3d91eca48f491ca685b107734b390d4134ea97a7ca5aaa0218b13ceb57064ccda038efabc7dffff16a37e1c6075b0d27becd721856d4614ad72b75680bc9bc7318574f83db54822ea60501663c2398846e5aef4ce0412973510aec16b6ae8e154d505d11c8171a9b615073f4115981f37283e8b3509617e8e0528e90beb76c138b29aba29d91d64ea7d91304693e1555e40b50f5f397208fe12a20d235fb38f546da85a510bcdb06af84d26", 0xc7}, {&(0x7f00000001c0)="2895815af8989871b369aa2120b6197ef893847165039989e9daf77ae9cb3882ef882888061b84e6bf72a3b079bd613e06fa7849f86973e4fb1dee02f5e4665eedb0b4bd02c4dfc50b45ca7d453d8da0d5e27ad29c7e859efda4558157393f6b58d850e227a66d5dc204a59f83d3d2328b9db71c707b57efb49cce92", 0x7c}, {&(0x7f0000000240)="ea10029667c98801679f43fb281b8a593f7464c9dd113e7955984e27512745155c35358580978e03419f48d16677615e7ad56414513a0b325ec2137f88af70f6e0839535d254cb4f65cc83b264624183260f767e63185ceb377641614c8285c3dda7c2ab", 0x64}, {&(0x7f00000002c0)="8e35e14d4bf70abd4fd4d2e142bbe500ff2d1ce087f8a415680f54077ad19a5f4e0aebfb7aa27dd43ed7fc46b3d925535c56bf91a7611712a5e84b20e5f32dddad731fa859e2faccb8bd19ba4ecff3be0871547902868a22981f2bb6752ba91072a13db9a38482e8d35e147319f8cee13c99f67241829ec3c08f681086e277811dee0593062a81c19653827d06ac", 0x8e}, {&(0x7f0000000380)="f880723f9a5c2d7d4691ae24955d025204cefb8f3c7812c7c074624c192ee699fcd5189a7668058c7e1d7d34ea719c6ca18ecb8e1f290fe939000f534fc98b1fcea9fb59499a2bf2338d230e8fcedfb5d27f4d264d3e20d5c2bb8623308fd1ca4f7b7002cfc5d8f255a2fb", 0x6b}, {&(0x7f0000000400)="86a200e4e8f9b8cc3e218b0e2d36a36b76d6b11f429e625accf7d71ab790368aea1396632d8e49640efd4a642a0d4bed1cd0f8c00002bae4926c5d0f25853e0e2eb4dbe4c5b9906c02896621febaa01c07fb115d9d3a89288ead0d1b5a705d2f2c301070671c10aae9d62873995ecf7db4de230c3506c99d1165fcf395cd11916753ef03a0936138b841b822ed82ebe6100b07c8fd0deff5b94485dcab050dc7fff82b6b2322b958be6b83400af71dfed0e64e22bcfe8521de71b471281f4ede0daca542a095dfb4f6a56260974fd168f63b6a45e44de658697a411150f17af637e9e2d24f9bdd1d", 0xe8}], 0x6, &(0x7f0000000580)=[{0x80, 0x29, 0x5, "4de0ec5da20be5c451eeedb891396a9276981d591f1867b96cd85ede62dc3a4e0c3a20fde29b56c093aecd316eb876faf1a915c3b946cc3c2f08ca41bc48d5a9e2b63eba5aef80e09afc61173d819d7c726565fb67b97bd38d889e9af9662b1d46113b1630df3128cc2c7b2eab3cdd"}, {0x70, 0x18b, 0x3, "2f5a4df0f760c02513f92b2fee6af92ecbbfc91f87d8849edbe96143a66ef264edbe1380aa01ab74dda18dd907e0b0c893832ab022df08bcad765e402a7bf9cbd0714ca46daaaddbf0de973ab636a12d71722308c541816df43c85288a21"}, {0x1010, 0x107, 0x5, "a374850e72e67ac65286e441fd4c0ecea8eebdfdbe18fd6c8c612f6a5412eaf70a9ab3ee2bf5da9e815d2a9d66ff8a58ff24637f47106b1dd4528e0f822ced0022e69d35e4ee5649fb4a036b06dd2b6330e71b9b6513e37759513d6172533b4340b5edd4f04abed7a9f78fc823d030f45f8f1caa0704cb8c33e18cfd0d7e422a3deebd5b76212d71253dfa4b1416fede7937bbee5e5f6f97f2055c5c1ffd0bef113e4f7d377e949f4072c6bd7a7f41c4ce225e5e553c3a5815ffc47fc92141bc170a38f887c8e47d2119c9a3d83a3b6eaefd44c28b94a7fcb7c4a5e1c8eaab08976abb92b8b088aa25fbe0e1b4c07e5596b21951319986b3550b957e590f8fde92d3f12f1bf59bb256830aaa43ace55bebe52da8fbf4d260d65e8dad3e0b3c0488ec7499a9c425c46c848c9a8e77cb42b5761ef4f92312d96e67ab4c596584ab3670d9d4a8675f492b80f8d0b0180ca2f7c849fdcd34bfbf3f36b4494f53c384cdab282dec568ed9ae433410b00d3058b09d33bd1930c9c8fd7862ff1603bc8d966a74e0fcf6f1831d6d4b1f73a69c9b4a555676c74f7f0bd3017849574e37fcc0148d7b810d2da106aa7c564ec812cfa9580b8bac4048d55c89486fa030befb1ebda33ef8529e5196969c40f22f863d24d0850c860f677f778744e6e9ea75519f8e2e6d8fb710d6a7f3a1058a5d2ff380f9e9aaefce07e7da8048d1d91481a36890dd48409c92b47f14d5b40631932db97c3534d68ae8ffa015978b55455759398d7206b0dba49bf45a893dcf1e14f8b2fe4ab4c324bdf194ded130083824a733930e58aa2fc4404ae18ab4119be6f2a073f6015eca568f63d3221053d34cb0177dd6bbe448fa12452478b2965e226b728aa9e745e9c31a3adead88229a053bf3648c5eb2f3ce4a252715c9fea05cbcb1faeabcf16713c5d6ab7cce4b61a6bf82e78b3a651e987b55d76c7f2683b268e3dcb0f38f648586f3430ceeaa890c5384962dfbd56a17f2cdeb516b40d0241d8a3a68aa43c3ded1322393aabf345ac42be12cfc2db3818dbc71d358fce8c8ef885a7c8dccff4e02dc0450c002964d4132d0772128836e4759a03dc3501bd94fc6c6ee32857af4a7b443949ed647eeab37f274bcfdba070a1969b870c590b305577e4ffd9a58d85b5f9a3b51287b27ab626d9103654bcfe3ed75c086f1868ebb594ce53ff130e21a4be060e3c3a07979c592a311f7f97cad136e7e66bc382f38954425d1afb7a8d170d2d1b7bed262aa58e72352ab6bae309fc7783bffeeddbab211588581c5cc3db1d1736f2e834c932d8bce932350b03f46ce7b2ce658049e88cbe5596e25ddd8b20a21bcd2ea077f130c099c4a1d3e34c92753bdfcdbe1bdf1b754462c9f33146b30ea686ffd5dbb88ff1b64a03547fc3e7e4207505cd0a4198158f44badbf558e34ba2ba734e5890416d6fe9bfaa154ac585b9e891565f7993d5b23617159cad1a110def40f16f70d6905e78523cb8b3e518486ce5c84137bbdfefbcb65397e925d4fa25a3be1529485ecdfb5ab2e7f4f009fc6af576ea7a54c1781d26c32a9633646999b722af64b369526db83e5622f2094661557ce33f5fac6799be0f91dc2aaf9d3ab149269c5074ad5ad54529d2bfa10a1d5d2cb14a9a29be777695c430e70f881742495114ec16903b54605171f3c86850a1476ec06238c2c5d7ae0141269decf0032081b1b5f87caa1693722fd2abcb71bf4557a0abdf34f860e38791277af76580117d4217d16073afbe9593c80f9e908ccb90fb673bc0ccbb4fb1da7bb4c8d69f71c538ba5bcbe12e429152cfbb3e1ae599cc865b409656320809498b94705279568ea8dc639318e786427b5220d50af192ca131751448ab64f5feaed2fb44bb2820aff5a8b92caf4df2f6f065b64c8b232a6aad1013b9de04ad0a84a0c1a25cfc98a0771c6e400540b48c49a1f997b574c2f0bd3a691aa0d02b99a6c3bf6aad040206256ab6c434a3ea12877b1abf645f1ae9e71405e52e85b0b237674b381cfd7d2e823aa60133464c49b8cef6ea0702dfef5d34005a33976051f77f204926838d3b7faa358426da27f38390cf9b082f6a9d5f41313781493aa8f5cfe27b8a7d9fad612e0f9eba343ed7408bb3af6435bcc9e57a0398cd07389b2bb0f0276c555fe79a8407e05d7cf341ec23e832e56d96a51e71fe2be3efbcdb1f4db886cbb5d9b0d56f515483a1544abcec7643e0095359a2e20d65d0c28dcf57a08b7d4d0dd4b5a14ddab47ef260337cf0da4ca18ccc3a314d9c05da6ea2812bab905d8070ac2f80830fafb37f595a63df3e4ab7c2f331ded33fcfb25e0a852e597feda6cb6bd059c221ef3e6c5b6aeb2a4a8ec732177ec3246582296d217c70d61e75fa46b2ae6fd4f4bb905c05ffb3d72dfa8f8aa4237b9abb786e65f0af80ff68915c32f92b26f35adcde18fa8f728ce635a1f4b782364523d16420f8e99e7c647baf9a982fa5aa17de8bd4e766a20570b74d55924850fd15860817784d47390c27d4fa460a8b4f7db8ded21f58d7b135fa3ce342660a27b1645a3e9106aacbf3e965ee88b104a53b9f941a12ba06dc05d37b212fe36dc8bed862bb1a66c26c62ce44f8de75d7b8e94860b91bca5050899449061c8b295d5aa669791007efc87e4444bedf58dfee0baee90383ce7cdf8c3eb71d3912e389e972cf3414f113aae466e020ac81f81704ce481686c0a83ca92f06d36d9d456e0bcd53336a0a3de76f06b6e8e20d267d5114cf1c6412e22723a99825b05fbf838dd2bf3e67899f74798af7282b1c3fe9dbc0b822f2395179961d051f22b665900dfbad09b2a05332f6933aa3fadceced0a57744f337f65b83cc8dac9848044aa8f45643b861fcdee3e8cb4cb831582f7fe48cd5461301b3e23142ab3e9a43f8baab1503f2416d7f7fb5c7ec91fc11040abd73f813214977a66fc18cf8be8f236dcbce9cfc30789e8578f511acf90117c67790da0925bf1751bc60400c2c4efda51b64f9955477a4078f6e9a8eeb60f303db8225dbbfd2bd8fb64b1da64fdc9de19ef9ea6dfa31c346558f490cd0e8135dd6c13237ed0dd8aedc57033794f63057dd490d6e6dd6033b9f73cdb890eea202389bfb366e6fa173311928323135ac2822b82729d8fbd7284a41a455430e3ce3240521899cb68debf304dea5a0af07fb88d1fc3a82093d1673de971ef7c79877f4b6709749dcb9ec0bec65221be01527034c596cba355832e370e8c77f354386620a2693b39f6fbe9ce1659eefeaf3d706daebd04e13084d0804623df0f97996888c94acf97a2bd2d9c51354c5507331110f8376bd091fbf51696b1ff309209146891d035650df9a0a5e4e362208e27036f9185edda94fd9defc14a0b4d136c9230896ef22df8b03bb4d92b0ef9ddc09597f6b46465c81ec161523a8b68a3057dae0ab060e67f2108e17923743ad7400d40282e89403c3f5832bd4ea851084d4ede8eaca0362eeac702fe5866b26b44c68c03d0bb56af785b78d071db030166716c2f05411a6e49b13cc1545738bacd4001746609ad764d45a051f96c5222f44d01a4a583505c3d006d10560e35ea8454d27ed113b1853aa476a6a85f483b5266405129a8aecb792dc65cbeec3776e20b255f09f2dbae7085e0f642762de78afe298fa0f7565bc7a2d69f68da459fa59416927cea22c9995167404b123943118b855f2bb6d189cdc3d0e01b3244db224e78a317ef02544b85557068f9e5178d70d0c4f3b60919b812c7a3aaef4ad9bd1de36fae85c925f40cba7ef8ec1f398998d51928c8fbe02f1ad931dd227e9e80c2677dcdb8e9ced7b059fc48b485b73eba1ae1ba897bb658065c337f12982b59039d78e4f31a77a6e1b0abec0f75e3a9fce9eabecde72eabdd0d52346fa5e11b5610120fa95d4fd4a1a5cc8e63d86e98395424f337e7376413b5d4ca49cf589fc9ded78a83e48315343c499a65f8550d0e1486e5b70ec9b84c37f9c9bbba0bbe7ee8b2eeb965214f1d480bb1efd005a8235d3df8d55bb96da1d2cb504c66aca0181eec37c08a27c2048b478ee553cd1ff0fc20061ab5c1895717ba620a138bb346511b2bcf0c55b705d25d570e877c4142f0e2df51e6fd3d1a9caf5f67a82387fa1e8ec9d5e68ee93858eb82ba86e44146e72d3e45288752905df0cb4ef4524a99900c85f959f6d546b18b300eb488b3e85337b332c6e36f7c953d5f6943adbaae4ca0cf951d795348c7a73ecc2605be898d0c6a11eccbb25bbbdcbae5ed367941f39e4e249605ef0c2f47de9d13aa5fc960c173f5287f57b61bc940c83a197bd86182ae3473278f96d1037d1c511da67e588a77c1b1ce4b183295b04cd13d1c9a11e5423c678725311ca9d5ccbd207d2aaeeef30827afd28bde9d63e9a99d46aa98c347a54ba9ff0ef2cc37a36e5bfaa1bdc370881dc8273015e255c4d0d721f26fcd34b89ff06500febf19aa4566f1f3977ac4d99a85827e6190498e85698867a2fad4baff56831e10df258c4f3322b08abf851f30ae30c0d8c1c5c85a2b7958d96417610ec2d9bad1a902049106ded0f8bbc3578227baa626ccbe75ead6d72c8c6b27b6871268c4edfe364480d01d8b723f56d8aed58b1bec729689a6e423a1f93b913436e0d86cd9b4c9d91e76ce4e5b1c664904c620c93d0d6a5d3c936cc6472d795dc4ff30b0b2647ec67f79d396b91c0c2aebcc2eecc951161547aa2044f73c7d923857affcc41ea426307a3a0684d0b2296a1264328351197aaed9778d3dbd975157fc5178586d003b5741d79ace8bfa2fddafbcb4e2bc1507fc0e25d8784746540c33fd6479af484e19dde6367955854281583d9dfac87bd3b604e5daa586342afaeaa3cb8a127f19942d8de5a49ad030746df756e9612b8c39ef4c409dc17f1046f3b3bc0766a61895791c7578e07fcd23981af17433b3168f454c2feb238bd0ac392c8c037edb45f22c19c80e6bbc0db4c42c05734c65df6808ca3b193b153d67980ee3076f2d1d6de72a0bcf3880babc8970355da402bd2c69105e5be115c03fda0cd1556d1b1fe5ef7cc0fefb604040337cc6ee11cdc1733a271f3688b22aa33f14f694081e3c1b0634ad50614e695eebb36ad87e03925ca9bc2da4d2f4492f5a1e947a62ee2c250da3d74eb1b3c0d0afb26c4299363b54d319391d7dc06e566d468eb85fd96724a38c7d62f008f723574b2ff929fc198c3578f81bbb91eccaa6895a46d09539f4332e93c9998e5bd9cd768268edfc29b7dad725a9ec401bd9737be92321059ae8339109030d499dd96e23c89e5d2a76f0b76b8b42ac981ebe889918b18ddef97d8138e4aaaffd25562eb88e1d4c0d60af7a93bbc3e326bb6438e23de499d8b4128ab954fa9f5a45eb9759e6a5cc378749e640046fe7998f7c954341df5fa994c30b39091a1f3897e8f980339e13e206f6bd1c082b26b1e752a9f769c424564d9291c5995f8d6161ff2f5a01682a91c4213ea82de8e296844a36578c1ea25822092bf817490a1cf8104f245ba1e4c02ac092d3ea04c80e77c0016064d0c15fb6b4286ad35529a8ab3b84590fdfcf75201145e784bae083414fd354104e9e4f2c94c63cfcc8cee4fbfe2fd90dab5f4b43126bc06c5161eae6572b46ceef6829536a8e75a6b1a41b1dcb96285ea6392901a80d0c0a504a6256d0d6d29c78e7ac4454d7eee4e1c7ef1a77fb2694e02c6194fd625cde6aded9f80ff9fa42a19d66a18e3c5f385693139b295b8ecc9e102612a45eca56167ab0a0389e53604d4be5cc00"}, {0xa8, 0x11, 0x0, "87b875937639d9103a242da5efe4d1158683b17a58d4320f852b74e73466ab7fae6bb52903be565ccddfd574cac8f90e1361709548ffac4b497765699c520dbb6bb4312160858b198953f85ecb5bd21d2179c9bd04a61a3d52d2e664094eaa3cc74e769e83d3f0dc48a05c07534bea4f7aee18fd0c902746f338e5084ae12c023d2d8f5231acd651f4e0cfbd1814561cc35370998c70"}], 0x11a8}, 0x40000) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x100000055, 0x0, 0x0, &(0x7f0000000000), 0x10}}], 0x400000000000189, 0x3) 14:27:58 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) 14:27:58 executing program 4: bpf$MAP_CREATE(0x9903000000000000, &(0x7f0000000040)={0x8, 0x4, 0x5, 0x8000000000008, 0x0, 0xffffffffffffffff, 0x23, [0x305f, 0xa]}, 0x2c) 14:27:58 executing program 1: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 316.225592] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) ioctl$int_in(r0, 0x5473, &(0x7f0000000080)=0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0xfff, 0x100) write$P9_RCLUNK(r1, &(0x7f0000000280)={0x7, 0x79, 0x1}, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10001, 0x0) sync_file_range(r2, 0x7f, 0x80000001, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in6={0xa, 0x4e24, 0x3, @remote, 0x40}}}, 0x90) 14:27:58 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab578067bf66d9fd89ce215996270d799f80181ac35a107b0c301ddf37365fb68d461f1a04693c560812ed0a7b0dd5b43e277aaff7074d4387035706c174424a3c96f9abfca19937d20897cb880f2613866dc29fb5021331778981"], 0x64) [ 316.358320] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:27:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000002180)=""/223, 0xdf}], 0x2}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, 0x0) connect$tipc(r0, &(0x7f00000006c0)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}], 0x2, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f00000007c0)=""/139, 0x8b}], 0x2, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/6, 0x6}], 0x3, 0x0) fstatfs(r1, &(0x7f0000000140)=""/71) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000300)={0x0, 0xb5fa, 0x7fff, [], &(0x7f00000002c0)=0x6}) 14:27:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) r4 = dup3(r0, r1, 0x80000) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000080)={0x1, 0x3, [{r3, 0x0, 0x100000000, 0xfffffffffffff000}, {r4, 0x0, 0x100000000}, {0xffffffffffffffff, 0x0, 0x12000, 0x6000}]}) 14:27:58 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 14:27:58 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x40001) write$vhci(r0, &(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000040)=@HCI_EVENT_PKT={0x4, 'I'}, 0x2) pipe(&(0x7f0000000080)) 14:27:59 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, 0x0, 0x0) 14:27:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_linger(r1, 0x1, 0xa, &(0x7f0000000100), 0x8) 14:27:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@local, @initdev}, 0xc) r1 = dup3(r0, r0, 0x80000) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f00000002c0)=""/74, &(0x7f0000000240)=0x4a) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x40, 0x3, 0x5}, 0x7}}, 0x18) write$P9_RLERROR(r1, &(0x7f0000000200)={0xc, 0x7, 0x2, {0x3, 'syz'}}, 0xc) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) write$P9_RREMOVE(r1, &(0x7f0000000280)={0x7, 0x7b, 0x1}, 0x7) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$search(0xa, r2, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, r3) 14:27:59 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, 0x0, 0x0) [ 317.603193] protocol 88fb is buggy, dev hsr_slave_0 [ 317.608996] protocol 88fb is buggy, dev hsr_slave_1 14:27:59 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:27:59 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x1, {0x3, 0x9, 0x9, 0x1000}, {0x9, 0x26e, 0x2}, {0x9, 0x5}}) unshare(0x3fffb) fallocate(r0, 0x23, 0x0, 0x9) 14:27:59 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x0) [ 317.751928] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:27:59 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x1, {0x3, 0x9, 0x9, 0x1000}, {0x9, 0x26e, 0x2}, {0x9, 0x5}}) unshare(0x3fffb) fallocate(r0, 0x23, 0x0, 0x9) [ 317.834748] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:00 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x1, {0x3, 0x9, 0x9, 0x1000}, {0x9, 0x26e, 0x2}, {0x9, 0x5}}) unshare(0x3fffb) fallocate(r0, 0x23, 0x0, 0x9) 14:28:00 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x0) 14:28:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7) 14:28:09 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x1, {0x3, 0x9, 0x9, 0x1000}, {0x9, 0x26e, 0x2}, {0x9, 0x5}}) unshare(0x3fffb) fallocate(r0, 0x23, 0x0, 0x9) 14:28:09 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x0) 14:28:09 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:09 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x40080) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x94, &(0x7f0000000040)=[@in={0x2, 0x4e21, @rand_addr=0x7}, @in6={0xa, 0x4e24, 0x10001, @mcast1, 0x40}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0xfffffffffffffff9, @remote}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x42a, @rand_addr="5eb0188d03efc11ec24cbd28dd1aeea0", 0xfffffffffffffff9}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0xff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x1, 0x7}, 0x8) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000240)) write$smack_current(r0, &(0x7f0000000280)='GPL]keyring&%\x00', 0xe) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="91", 0x1}, {&(0x7f0000001300)="f4e445b3013a20f98a8cad79ac54bd52cea77df90729556e802ee8b9f817701a4e2d7be9fc574c1d786c8887a8ea1397c379c0fc535008b1d4e6815e6a3193ca23c2752d895796f7ee", 0x49}, {&(0x7f0000001380)="7d21a6b912f337699db2ce103120296aed6eb697642281dd84b2dd1f31701b9647f5567eaed6dd92fece37347844bef95059c7373b83c65ff2eadd6223b0bb5c6599bfdacb5f0a61dd91f7f3d22e761b7e2861ddfeb0", 0x56}, {&(0x7f0000001400)="39eb10bb6658ca47b9ecad016b8fddc018bc309f0c9e555f9f65118bd4b13cde4280f08ecbbb74e4a7687338b0f24b47cbefd5b7004c7fede470c58a468523726538824456b3bcd6c9386f3f02eb224ce62456036a4c3bbfa82e12c3643efc5407ee6a94eb77e7f506097e09b07437f1d7d9852a48209f02705978f3c1d216a0c492406eeebdba0be40e84c5ebb4946d7495835bec0c5e38e87f0ef918b6a4dee0ac520dc49f0ea05dc91888c5eacb0b342de2d684", 0xb5}, {&(0x7f00000014c0)="107e28ee73aa3ff5356e33cbcc0c667427d96e1e963456452f626a5300a1dcd7261ae7fc02293dd6df09c711edb8c92d2002454b1621bb94ec7aedf9ed2942418213f93eeae0b71740e79331aa4b9bedf47bb23dff85c4ebecdb9432ac88a9b4b6def6a121d3273082a8ffccd9b7acc77582217c6051b7131ddc979ae397157fb1957a0bc2ec9db21697c69259c8aa451244fd402c1b3d4487b8707b9af9fdd2d67f2f60a345f0f789594883e8c59af7d6a0c9895b8d319c7ba134e3e0ec9d9631674c057f9daae27a", 0xc9}], 0x6) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001640)={r2, 0x9}, &(0x7f0000001680)=0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000016c0)=0x7) ioctl$TUNSETLINK(r0, 0x400454cd, 0x109) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001700)={r2, 0xe0, 0x20}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001740)={'bpq0\x00', 0x1000}) r4 = inotify_add_watch(r0, &(0x7f0000001780)='./file0\x00', 0x10) inotify_rm_watch(r0, r4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000017c0)='hsr0\x00', 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001800)) r5 = getpgrp(0x0) ptrace$peek(0x1, r5, &(0x7f0000001840)) write$binfmt_misc(r0, &(0x7f0000001880)={'syz1', "e368de7443a663e73b25ed76537d6ae65119b45a14380aa48be0d4bedc0a76c90c0d044d43cf9f0a348d"}, 0x2e) r6 = add_key(&(0x7f00000018c0)='dns_resolver\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)="c044a1f17fff48563ffdae3f8c61da1623ca2faa0a69f4097546d3a7f042aecaa2d177309873d6d36541b7be84809aef810608b3baf854223d243a5de72c9e3b976c", 0x42, 0xfffffffffffffff9) r7 = request_key(&(0x7f00000019c0)='cifs.spnego\x00', &(0x7f0000001a00)={'syz', 0x0}, &(0x7f0000001a40)='\x00', 0xfffffffffffffff9) keyctl$reject(0x13, r6, 0x3, 0x277400, r7) r8 = semget(0x1, 0x3, 0xc2) semctl$IPC_RMID(r8, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/capi20\x00', 0x0, 0x0) keyctl$unlink(0x9, r7, r6) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001ac0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/nullb0\x00', 0x290000, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001b80)={r3, 0x5}, 0x8) 14:28:09 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 327.538216] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 327.554663] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:09 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x1, {0x3, 0x9, 0x9, 0x1000}, {0x9, 0x26e, 0x2}, {0x9, 0x5}}) fallocate(r0, 0x23, 0x0, 0x9) 14:28:09 executing program 4: socket$inet6(0xa, 0x3, 0x84) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x80800) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x9, 0xfffffffffffffffc, 0x40, 0x16a1f19e, 0x9, 0x8, 0x1}, 0x1c) ptrace(0x4207, r1) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000140)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10880, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x46000900}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000001) tkill(r1, 0x3c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000540)='./file0\x00', r4, r5) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='projid_map\x00') 14:28:09 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) [ 327.956918] IPVS: ftp: loaded support on port[0] = 21 14:28:10 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x23, 0x0, 0x9) 14:28:10 executing program 3: fallocate(0xffffffffffffffff, 0x23, 0x0, 0x9) 14:28:10 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 14:28:10 executing program 3: fallocate(0xffffffffffffffff, 0x23, 0x0, 0x9) [ 328.495322] protocol 88fb is buggy, dev hsr_slave_0 [ 328.500716] protocol 88fb is buggy, dev hsr_slave_1 [ 328.557208] IPVS: ftp: loaded support on port[0] = 21 14:28:10 executing program 3: fallocate(0xffffffffffffffff, 0x23, 0x0, 0x9) 14:28:10 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) [ 328.826481] IPVS: ftp: loaded support on port[0] = 21 14:28:11 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 329.170188] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 329.187021] chnl_net:caif_netlink_parms(): no params data found [ 329.269828] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.276400] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.284859] device bridge_slave_0 entered promiscuous mode [ 329.295962] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.302581] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.311070] device bridge_slave_1 entered promiscuous mode [ 329.349889] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 329.361542] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 329.403392] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 329.411985] team0: Port device team_slave_0 added [ 329.420915] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 329.429441] team0: Port device team_slave_1 added [ 329.443613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 329.452146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 329.515932] device hsr_slave_0 entered promiscuous mode [ 329.552752] device hsr_slave_1 entered promiscuous mode [ 329.596675] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 329.603880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 329.623592] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.629991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.637111] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.643715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.744472] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 329.750547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.763410] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 329.776318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.785552] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.797040] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.806885] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 329.827271] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 329.833508] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.851181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.859927] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.866549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.909209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.917606] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.924118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.934119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.971793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.981518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.993362] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 330.007908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.016861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.025588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.034549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.046556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.067399] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 330.085802] 8021q: adding VLAN 0 to HW filter on device batadv0 14:28:12 executing program 3: r0 = creat(0x0, 0x0) fallocate(r0, 0x23, 0x0, 0x9) 14:28:12 executing program 0: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f00000025c0)) 14:28:12 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005011ca30000000000000000000011560b824843ab316aca4446ab22e9183cf4056906d3a5a5158ea8e9311b26c8fec6f8a9c5b585f0e7212da0d8eb8a1605cfa3746cf10844232e8441c731ca773279e929fef282722e07574ce2b525a206f2228703dcd9ecd0aa3d7391cc08ce8362b388032588d6685b39a95c38c60800000000000000aa7857bc65842d47050f6bd0b848b4c56825b267b45924cd692d"], 0x1}}, 0x0) 14:28:12 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94bf6e1b57bb42c3c95f45eab"], 0x5a) [ 330.292412] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 330.312616] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 330.363039] protocol 88fb is buggy, dev hsr_slave_0 [ 330.368658] protocol 88fb is buggy, dev hsr_slave_1 14:28:12 executing program 3: r0 = creat(0x0, 0x0) fallocate(r0, 0x23, 0x0, 0x9) 14:28:12 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000, 0x40000000, &(0x7f0000000100)=@caif=@dbg={0x25, 0x800, 0x4648}, 0x80) r2 = accept(r0, &(0x7f00000014c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000200)=0x80) bind$vsock_dgram(r3, &(0x7f0000001540)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$isdn(0x22, 0x3, 0x32) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000002c0), 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001580)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x2, 0x1fe00000000000, 0x4, 0x1, 0x80000001}, &(0x7f0000001640)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001680)={r5, @in={{0x2, 0x4e22, @multicast2}}, 0x3f, 0x8}, 0x90) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7) 14:28:12 executing program 4: 14:28:12 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 14:28:12 executing program 3: r0 = creat(0x0, 0x0) fallocate(r0, 0x23, 0x0, 0x9) 14:28:12 executing program 4: r0 = socket$inet(0x10, 0x2, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 14:28:13 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x23, 0x0, 0x9) 14:28:13 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 14:28:13 executing program 0: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:28:13 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:13 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x23, 0x0, 0x9) 14:28:13 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) [ 331.618738] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:28:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r0, &(0x7f0000001080)=""/4096, 0x18) [ 331.711811] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:13 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x23, 0x0, 0x9) 14:28:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}]}, 0x28}}, 0x0) 14:28:13 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32"], 0x2d) 14:28:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r0, &(0x7f0000001080)=""/4096, 0x18) 14:28:14 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x9) 14:28:14 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32"], 0x2d) 14:28:14 executing program 0: syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x805) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, 0x0) 14:28:14 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:14 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800010c0045006, &(0x7f0000000040)=0x7fff) 14:28:14 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x9) 14:28:14 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32"], 0x2d) 14:28:15 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x9) [ 332.924941] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 332.946705] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:15 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 14:28:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000108}]}) 14:28:15 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb70"], 0x44) 14:28:15 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x23, 0x0, 0x0) 14:28:15 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb70"], 0x44) 14:28:16 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0xffd) 14:28:16 executing program 5: syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x529, 0x141) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x0) 14:28:16 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x23, 0x0, 0x0) 14:28:16 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb70"], 0x44) 14:28:16 executing program 1: syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x56, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 334.050641] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:16 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x23, 0x0, 0x0) 14:28:16 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x3f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 334.124556] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:28:16 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f94b"], 0x4f) 14:28:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 14:28:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f00000000c0)={0x5a, 0xa, 0x8}) 14:28:16 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) [ 334.765301] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.772107] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.779014] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.785848] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.792818] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.799650] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.806716] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.813642] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.820454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.827373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.834211] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 334.939182] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syx1 14:28:17 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:17 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb70"], 0x44) 14:28:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 14:28:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0x1, 0x0, 0x0) 14:28:17 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) 14:28:17 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 335.206301] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.209238] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 335.213324] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.227371] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.234212] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.241092] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.248088] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 14:28:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="15", 0x1}], 0x1}, 0x841) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) [ 335.254941] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.261768] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.268666] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.275525] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.282408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 335.349430] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 335.376560] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syx1 14:28:17 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb70"], 0x44) 14:28:17 executing program 4: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 335.682941] protocol 88fb is buggy, dev hsr_slave_0 [ 335.683242] protocol 88fb is buggy, dev hsr_slave_0 [ 335.688437] protocol 88fb is buggy, dev hsr_slave_1 [ 335.693601] protocol 88fb is buggy, dev hsr_slave_1 [ 335.703962] protocol 88fb is buggy, dev hsr_slave_0 [ 335.709517] protocol 88fb is buggy, dev hsr_slave_1 14:28:17 executing program 4: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) 14:28:17 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb70"], 0x44) 14:28:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000040)) 14:28:18 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:18 executing program 4: rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, 0x0, 0x8) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) tkill(r0, 0x39) ptrace$cont(0x1f, r0, 0x0, 0x6) 14:28:18 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d"], 0x4a) 14:28:18 executing program 5: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xffff) write$binfmt_elf64(r1, &(0x7f0000001180)=ANY=[@ANYRES64], 0x8) 14:28:18 executing program 3: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 14:28:18 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 336.591813] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:28:18 executing program 3: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 336.659564] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 336.746174] netlink: 'syz-executor4': attribute type 1 has an invalid length. 14:28:18 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d"], 0x4a) [ 336.800897] netlink: 'syz-executor4': attribute type 1 has an invalid length. 14:28:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x30}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000580)) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4}}], 0xb000, 0x0, 0x0) 14:28:19 executing program 4: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x6, 0x598, [0x20000500, 0x0, 0x0, 0x20000740, 0x20000770], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x47, 0x3, 'veth1_to_bridge\x00', 'bridge_slave_0\x00', 'ipddp0\x00', 'hsr0\x00', @random="f2b075e00276", [0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x25}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @arpreply={'arpreply\x00', 0xc, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x27, 0x8bff, 'bond_slave_1\x00', 'irlan0\x00', 'syzkaller1\x00', 'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x10}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x2c8, 0x380, 0x3b0, [@vlan={'vlan\x00', 0x8, {{0x2, 0x4, 0x0, 0x5, 0x1}}}, @bpf0={'bpf\x00', 0x208, {{0x17, [{0x0, 0xa25, 0x40, 0xffff}, {0x1, 0x4, 0x5, 0x1}, {0x4, 0x6cb, 0xffffffffffffffff, 0xd4d}, {0x4, 0x3a125ec9, 0x5, 0x2}, {0xfffffffffffffffe, 0x8, 0x81, 0x2}, {0x9, 0x3f, 0x6, 0xd503}, {0x1, 0xfff, 0x74918464, 0xffffffffffffff01}, {0x6, 0x3, 0x4, 0x6}, {0x3, 0x1, 0x80000001, 0x4}, {0x8, 0x8, 0x9, 0x40}, {0x9, 0x101, 0x3, 0x2}, {0xfffffffffffffffa, 0x3ff, 0x7}, {0x6, 0x2, 0x5, 0x8}, {0x3, 0x4, 0x8, 0x8}, {0x7, 0x7, 0xfffffffffffffff9, 0x1}, {0x2, 0x7, 0x5, 0x2}, {0xfffffffffffffc00, 0xffff, 0x1, 0x4}, {0x1ff, 0xd21, 0x6, 0xf9}, {0x9, 0x6, 0x9, 0x798}, {0x2, 0x7, 0xffffffff, 0x7fff}, {0x2, 0x3ff, 0xba, 0x83f5}, {0x80000001, 0x100000001, 0x9, 0x3ff}, {0x10001, 0x5, 0x2855, 0x1ff}, {0x6, 0xa8b00000, 0x3, 0x8}, {0x906, 0xdf, 0x2, 0x3}, {0x4, 0x200, 0x7, 0x4b4}, {0x8, 0x5, 0x0, 0x80000000}, {0x0, 0x7, 0x8, 0x5}, {0x4, 0x30, 0x3, 0x6d220651}, {0x100000000, 0x40, 0x4}, {0x80000001, 0x8, 0x100000000, 0x6}, {0x81b, 0x1, 0x1, 0x200}, {0x8, 0x5b51fc1a, 0x1ff, 0x40}, {0x6, 0x80, 0x0, 0x7fff}, {0x5, 0x7f, 0x1, 0x100}, {0x9, 0x6, 0xffffffffffffff81, 0x4401}, {0x5a, 0x101, 0x8, 0x7}, {0xdfc, 0x8, 0x8, 0x3f}, {0x7fffffff, 0x9, 0x7, 0x5}, {0x3, 0x3c, 0x800, 0x2}, {0x200000000, 0x200, 0x40, 0x20}, {0x3, 0x5, 0x1, 0x3}, {0x6, 0x4, 0x7ff, 0xa4}, {0x8, 0x7, 0x40, 0x4}, {0x531, 0x5, 0x7, 0x8001}, {0x800, 0x6, 0x20, 0x5}, {0xfffffffffffff800, 0xea, 0x5, 0x3}, {0x9, 0x9, 0x7, 0x79}, {0x86, 0x4ef2, 0x7f, 0x4}, {0x800, 0x2, 0x10001, 0x1}, {0xffffffffffff0000, 0x81, 0x80000001, 0xfffffffffffff7a6}, {0x10000, 0x1, 0x3, 0x2}, {0xffffffffffffff54, 0x80, 0x40, 0xfff}, {0x7fff, 0x5, 0x1ff, 0x4}, {0x10001, 0x58ed, 0x53f9, 0x4}, {0xd21f, 0x145, 0x2, 0x6}, {0x3, 0x4, 0x2, 0xfffffffffffffffe}, {0x1, 0x25f, 0x514, 0x1000}, {0x641c, 0x7fffffff, 0x100, 0x401}, {0x8d5b, 0x20, 0x4, 0x5}, {0x0, 0x80000000, 0x8, 0xf9}, {0x6, 0x8, 0x43, 0x4}, {0x3f, 0x100000000, 0x6, 0x1ff}, {0x6, 0x3ff, 0x2, 0x1}], 0x401}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x4c, {{0x9, 0xac, 0x9, 0x1, 0x0, "cab208b0269fa60a5fe6698ee3560213133b1dd9d60bb2dca68202579b36448c309611215ac2b7fa4ff5ed3f21502902f4cc9c13f571be9254cf2f031ee5e57d"}}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x1, 0x981, 0x8}}}]}, @arpreply={'arpreply\x00', 0xc, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{{{0x5, 0x0, 0x0, 'veth0_to_bridge\x00', 'ip6_vti0\x00', 'ifb0\x00', 'rose0\x00', @broadcast, [], @local, [], 0x70, 0x70, 0xb8}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x0, 'syz0\x00'}}}}]}]}, 0x648) 14:28:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070") sendto$inet(r0, 0x0, 0x0, 0x20040094, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 337.114547] kernel msg: ebtables bug: please report to author: Wrong len argument 14:28:19 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 14:28:19 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ffdeffd) 14:28:19 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d"], 0x4a) 14:28:19 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:19 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') exit(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, 0x0) 14:28:19 executing program 5: close(0xffffffffffffffff) r0 = socket(0x840000000002, 0x3, 0xff) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x6, 0x598, [0x20000500, 0x0, 0x0, 0x20000740, 0x20000770], 0x0, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x47, 0x3, 'veth1_to_bridge\x00', 'bridge_slave_0\x00', 'ipddp0\x00', 'hsr0\x00', @random="f2b075e00276", [0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x25}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @arpreply={'arpreply\x00', 0xc, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x27, 0x8bff, 'bond_slave_1\x00', 'irlan0\x00', 'syzkaller1\x00', 'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x10}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x2c8, 0x380, 0x3b0, [@vlan={'vlan\x00', 0x8, {{0x2, 0x4, 0x0, 0x5, 0x1}}}, @bpf0={'bpf\x00', 0x208, {{0x17, [{0x0, 0xa25, 0x40, 0xffff}, {0x1, 0x4, 0x5, 0x1}, {0x4, 0x6cb, 0xffffffffffffffff, 0xd4d}, {0x4, 0x3a125ec9, 0x5, 0x2}, {0xfffffffffffffffe, 0x8, 0x81, 0x2}, {0x9, 0x3f, 0x6, 0xd503}, {0x1, 0xfff, 0x74918464, 0xffffffffffffff01}, {0x6, 0x3, 0x4, 0x6}, {0x3, 0x1, 0x80000001, 0x4}, {0x8, 0x8, 0x9, 0x40}, {0x9, 0x101, 0x3, 0x2}, {0xfffffffffffffffa, 0x3ff, 0x7}, {0x6, 0x2, 0x5, 0x8}, {0x3, 0x4, 0x8, 0x8}, {0x7, 0x7, 0xfffffffffffffff9, 0x1}, {0x2, 0x7, 0x5, 0x2}, {0xfffffffffffffc00, 0xffff, 0x1, 0x4}, {0x1ff, 0xd21, 0x6, 0xf9}, {0x9, 0x6, 0x9, 0x798}, {0x2, 0x7, 0xffffffff, 0x7fff}, {0x2, 0x3ff, 0xba, 0x83f5}, {0x80000001, 0x100000001, 0x9, 0x3ff}, {0x10001, 0x5, 0x2855, 0x1ff}, {0x6, 0xa8b00000, 0x3, 0x8}, {0x906, 0xdf, 0x2, 0x3}, {0x4, 0x200, 0x7, 0x4b4}, {0x8, 0x5, 0x0, 0x80000000}, {0x0, 0x7, 0x8, 0x5}, {0x4, 0x30, 0x3, 0x6d220651}, {0x100000000, 0x40, 0x4}, {0x80000001, 0x8, 0x100000000, 0x6}, {0x81b, 0x1, 0x1, 0x200}, {0x8, 0x5b51fc1a, 0x1ff, 0x40}, {0x6, 0x80, 0x0, 0x7fff}, {0x5, 0x7f, 0x1, 0x100}, {0x9, 0x6, 0xffffffffffffff81, 0x4401}, {0x5a, 0x101, 0x8, 0x7}, {0xdfc, 0x8, 0x8, 0x3f}, {0x7fffffff, 0x9, 0x7, 0x5}, {0x3, 0x3c, 0x800, 0x2}, {0x200000000, 0x200, 0x40, 0x20}, {0x3, 0x5, 0x1, 0x3}, {0x6, 0x4, 0x7ff, 0xa4}, {0x8, 0x7, 0x40, 0x4}, {0x531, 0x5, 0x7, 0x8001}, {0x800, 0x6, 0x20, 0x5}, {0xfffffffffffff800, 0xea, 0x5, 0x3}, {0x9, 0x9, 0x7, 0x79}, {0x86, 0x4ef2, 0x7f, 0x4}, {0x800, 0x2, 0x10001, 0x1}, {0xffffffffffff0000, 0x81, 0x80000001, 0xfffffffffffff7a6}, {0x10000, 0x1, 0x3, 0x2}, {0xffffffffffffff54, 0x80, 0x40, 0xfff}, {0x7fff, 0x5, 0x1ff, 0x4}, {0x10001, 0x58ed, 0x53f9, 0x4}, {0xd21f, 0x145, 0x2, 0x6}, {0x3, 0x4, 0x2, 0xfffffffffffffffe}, {0x1, 0x25f, 0x514, 0x1000}, {0x641c, 0x7fffffff, 0x100, 0x401}, {0x8d5b, 0x20, 0x4, 0x5}, {0x0, 0x80000000, 0x8, 0xf9}, {0x6, 0x8, 0x43, 0x4}, {0x3f, 0x100000000, 0x6, 0x1ff}, {0x6, 0x3ff, 0x2, 0x1}], 0x401}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x4c, {{0x9, 0xac, 0x9, 0x1, 0x0, "cab208b0269fa60a5fe6698ee3560213133b1dd9d60bb2dca68202579b36448c309611215ac2b7fa4ff5ed3f21502902f4cc9c13f571be9254cf2f031ee5e57d"}}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x1, 0x981, 0x8}}}]}, @arpreply={'arpreply\x00', 0xc, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{{{0x5, 0x0, 0x0, 'veth0_to_bridge\x00', 'ip6_vti0\x00', 'ifb0\x00', 'rose0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff], 0x70, 0x70, 0xb8}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x0, 'syz0\x00'}}}}]}]}, 0x648) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)}], 0x1}, 0x41) 14:28:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 14:28:19 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1"], 0x4d) [ 337.958631] kernel msg: ebtables bug: please report to author: Wrong len argument [ 337.994948] kernel msg: ebtables bug: please report to author: Wrong len argument 14:28:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 14:28:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) 14:28:20 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1"], 0x4d) [ 338.403255] protocol 88fb is buggy, dev hsr_slave_0 [ 338.408911] protocol 88fb is buggy, dev hsr_slave_1 14:28:20 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_bond\x00', 0x210) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x10) 14:28:20 executing program 5: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 14:28:20 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1"], 0x4d) 14:28:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) 14:28:20 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x0, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 338.749028] validate_nla: 2 callbacks suppressed [ 338.749044] netlink: 'syz-executor1': attribute type 15 has an invalid length. [ 338.776308] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 338.803221] protocol 88fb is buggy, dev hsr_slave_0 [ 338.808749] protocol 88fb is buggy, dev hsr_slave_1 14:28:20 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002bc0)='/dev/dlm_plock\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002c00)=""/4096, 0x1000, 0x0) 14:28:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/raw\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 14:28:21 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x60) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280), 0x0) 14:28:21 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1f9"], 0x4e) 14:28:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000180)) 14:28:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/raw\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 14:28:21 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:21 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcfd1"], 0x4d) 14:28:21 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x402102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x1a, 0x0, 0x373) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42803) 14:28:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 14:28:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clone(0x13102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x1b}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 339.753519] ptrace attach of "/root/syz-executor3"[11850] was attempted by "/root/syz-executor3"[11855] 14:28:21 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x0, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:21 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x80e) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000), 0x0) [ 339.865261] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 339.899948] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x0) 14:28:22 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9fcf"], 0x4c) 14:28:22 executing program 5: socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) 14:28:22 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x8, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57200000000000000004e2f9663a918fa1efd9b0b"}, 0x7b8}}, 0x0) 14:28:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$P9_RAUTH(r0, &(0x7f0000000000)={0x14, 0x67, 0x0, {0x0, 0x0, 0x5}}, 0x14) [ 340.531998] device nr0 entered promiscuous mode 14:28:22 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:22 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9f"], 0x4b) 14:28:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7065726d686174203078303030632066a7e073842e57303030303030303030303030315e00"], 0x1) 14:28:22 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000087, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000280)=0x20000100000001, 0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0xffffffff, 0xc9a5, 0x7ff, 0x7fffffff, 0x0, 0x3, 0x3e, 0x6, 0x22, 0x38, 0x38e, 0x8e, 0x6, 0x20, 0x1, 0x6, 0x5, 0x100}, [{0x3, 0x9, 0x8, 0x6, 0x6ab, 0x7, 0x4, 0xffffffffffffffff}], "a3a3c918af1b0c407270d9fc5d82816c72f2409018801086128e77373d2b105203196ecf975876a6f63a324d61a395712a9bc8c035ec4883fae2ddddd8c13fb7c8dab399cc60b41772af96a99dc426a06c3c090493632fcb30707c6b119307f461a8499ea7909c8678997929b5cb72691269d8cd0d260db77e14bf13546d3bef1940380df00bb44ccf54ca488a782e7a1640df67f84a389aa6b3d07105fdccae384a880bd6361bcab1"}, 0x101) [ 340.884620] net_ratelimit: 6 callbacks suppressed [ 340.884636] protocol 88fb is buggy, dev hsr_slave_0 [ 340.895195] protocol 88fb is buggy, dev hsr_slave_1 14:28:23 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9f"], 0x4b) 14:28:23 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x0, 0x1ff, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:23 executing program 5: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 14:28:23 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x40000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="080100007d020000ad0300009b010000320000000000000008000000000000001906ce3bea8825ff8b0efabd32e6944771f1e01cf68b7dcb3f97e679d01073cf3b67bb700fb56f275e0d9f"], 0x4b) [ 341.273703] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) 14:28:23 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) socket$kcm(0x2, 0x0, 0x2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:28:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2711, 0x0, &(0x7f0000000000)) 14:28:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 14:28:24 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:24 executing program 5: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 14:28:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0xf010000, 0x0, 0x0, [], 0x0}) 14:28:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 14:28:24 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x42, 0x0, &(0x7f0000000200)="e460cdfbef24080000000a9386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d500000001ec40210e242f3feeaabe6065584f87ebab1d000000", 0x0}, 0x28) 14:28:24 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x3, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:24 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x80e) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3f}, 0x0) 14:28:24 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:28:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x44e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x341) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) sendto$inet(r1, &(0x7f0000000000)='?', 0x1, 0x4008004, 0x0, 0x0) 14:28:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x109, 0x0, 0x0, {0x2}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}}, 0x0) [ 342.541969] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0xa) sendfile(r2, r1, 0x0, 0x7) [ 342.601828] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:28:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) write(r1, &(0x7f0000000000)="7f", 0x1) [ 342.884169] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:28:25 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:25 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) 14:28:25 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/70, 0x46}], 0x1, 0x0) 14:28:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000080)) 14:28:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x8040ae9f, &(0x7f0000000040)) 14:28:25 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {0x3, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:25 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x800005c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) fchdir(0xffffffffffffffff) 14:28:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 14:28:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40000, 0x40000007e) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r4 = semget(0x2, 0x3, 0x0) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f0000000040)=""/24) close(0xffffffffffffffff) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000240)=0x80) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x20, &(0x7f0000000200)=[@cr0={0x0, 0x80000000}], 0x1) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0xb704, &(0x7f0000000440)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) [ 343.618766] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:25 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 14:28:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x805) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, 0x0) 14:28:25 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x800005c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) fchdir(0xffffffffffffffff) 14:28:26 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuacct.usage\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 14:28:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 14:28:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 14:28:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40000, 0x40000007e) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r4 = semget(0x2, 0x3, 0x0) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f0000000040)=""/24) close(0xffffffffffffffff) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000240)=0x80) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x20, &(0x7f0000000200)=[@cr0={0x0, 0x80000000}], 0x1) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0xb704, &(0x7f0000000440)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) 14:28:26 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {0x0, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 344.536233] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:26 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') prctl$PR_GET_UNALIGN(0x5, 0x0) 14:28:26 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) fallocate(r0, 0x0, 0x0, 0x100000000000200) 14:28:26 executing program 5: 14:28:27 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0xa6ba0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008040000, 0x3f00000000000759, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) tkill(r0, 0x15) 14:28:27 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf010000, 0x0, 0x0, [], 0x0}) 14:28:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1) fcntl$setstatus(r4, 0x4, 0x42803) 14:28:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffefe, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x2a1) sendto$inet(r0, &(0x7f0000000180)="8f", 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) write$P9_RLERROR(r1, &(0x7f00000002c0)={0x1c, 0x7, 0x0, {0x13, '(usereth0$user,proc'}}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)={0x3b, 0x3, 0x0, {0x0, 0x1a, 0x0, 'posix_acl_accessselinuxem1'}}, 0x3b) 14:28:27 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:27 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x6) ftruncate(r0, 0x0) [ 345.581809] ptrace attach of "/root/syz-executor2"[12105] was attempted by "/root/syz-executor2"[12106] 14:28:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1) fcntl$setstatus(r4, 0x4, 0x42803) 14:28:27 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {0x0, 0x3ff}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:27 executing program 4: 14:28:27 executing program 4: 14:28:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1) fcntl$setstatus(r4, 0x4, 0x42803) [ 345.878461] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:30 executing program 3: 14:28:30 executing program 4: 14:28:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1) fcntl$setstatus(r4, 0x4, 0x42803) 14:28:30 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:30 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:30 executing program 2: [ 348.249597] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:30 executing program 2: 14:28:30 executing program 4: 14:28:30 executing program 3: 14:28:30 executing program 2: 14:28:30 executing program 4: 14:28:30 executing program 3: 14:28:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1) 14:28:30 executing program 2: 14:28:31 executing program 4: 14:28:31 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:31 executing program 3: 14:28:31 executing program 2: 14:28:31 executing program 4: 14:28:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1) 14:28:31 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:31 executing program 4: 14:28:31 executing program 3: 14:28:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002000815fe45ae1871850ff07000000000000000000230000000e9c00000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 349.461279] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:31 executing program 3: 14:28:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) 14:28:31 executing program 4: 14:28:32 executing program 3: 14:28:32 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:32 executing program 2: 14:28:32 executing program 4: 14:28:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_buf(r3, 0x29, 0x14, 0x0, 0x0) 14:28:32 executing program 3: 14:28:32 executing program 4: 14:28:32 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:32 executing program 2: 14:28:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 14:28:32 executing program 2: 14:28:32 executing program 4: 14:28:32 executing program 3: [ 350.650032] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:33 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:33 executing program 3: 14:28:33 executing program 2: 14:28:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:28:33 executing program 4: 14:28:33 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x0, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:33 executing program 4: [ 351.380629] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:33 executing program 2: 14:28:33 executing program 3: 14:28:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:33 executing program 3: 14:28:33 executing program 4: 14:28:34 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:34 executing program 2: 14:28:34 executing program 3: 14:28:34 executing program 4: 14:28:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:34 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x0, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 352.376941] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:34 executing program 2: 14:28:34 executing program 3: 14:28:34 executing program 4: 14:28:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:34 executing program 2: 14:28:34 executing program 4: 14:28:35 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xf0b}, 0x20}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:35 executing program 3: 14:28:35 executing program 4: 14:28:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:35 executing program 2: 14:28:35 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x0, 0x3}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:35 executing program 3: 14:28:35 executing program 4: 14:28:35 executing program 2: 14:28:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) [ 353.595404] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:35 executing program 3: 14:28:35 executing program 4: 14:28:36 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xf0b}, 0x20}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:36 executing program 2: 14:28:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:36 executing program 3: 14:28:36 executing program 4: 14:28:36 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0xd7, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:36 executing program 3: 14:28:36 executing program 4: 14:28:36 executing program 2: 14:28:36 executing program 2: [ 354.736506] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:36 executing program 3: 14:28:37 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xf0b}, 0x20}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:37 executing program 4: 14:28:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:37 executing program 2: 14:28:37 executing program 3: 14:28:37 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:37 executing program 3: 14:28:37 executing program 4: 14:28:37 executing program 2: 14:28:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:37 executing program 3: 14:28:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) [ 355.777286] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:38 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:38 executing program 4: 14:28:38 executing program 2: 14:28:38 executing program 3: 14:28:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:38 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:38 executing program 2: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 14:28:38 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005340)=[{0x10, 0x1}], 0x10}}], 0x1, 0x8000) 14:28:38 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 14:28:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:38 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xcf\x86w\xa3.\x00\x00\x00\x00\x00\x00\x11\xf7\x9d\xe5\xae3\xe8\x98\x8dA\x86\xd1\xee\xad\xd1\x00\x98/55\xe7J\x87\x9a\x05\v\x8f\xef?J\xf7m{\x05\x02\x17\x80\xe3\xad\x85\x0f:\'\x1f\xe5a\x00\xfe@Y3\x00\xbf\x9f;\xce5\x1f\xacN\xec\x8c\xde\xa1?\x14oj2\xe3k\xc9IH\x98\\\xcc\xf5\xd2\x11;\xc1j\x06\xc4N\xc4\xbbVf\xdaR\xf1\xbc\x15\xeb\xd0W\xc2\xf3c\xae\xd1\x11\xf1\xcd\xcd\x8d\xa1\xed\x97\xcdxg\xbc\xd5M\xdb\x01\xe5c\xb2^\x14\x15|^\x97\x84\xbd\x9cbVD\x8a\a\xdb\xd2\xc9~\xac\xbd@.\xd4\xba\xea\xbe\x82p\x05\x90\xbcT\x8a$~\x98?\x0e\xb8\x8f\xc8\x87\xcdE\x02=\xdc{\x1c\xe8\xdf\xa87\xe5\xcf\xeb\x14}\x95\x8eDww_v\x13cM\x9d\x17\xa9\xbc\aE\xfc\x18\xa5U\v=\xda\xbd\xd1\xce 2\xf5P\xac\x9f\xbd\x94\x9c\xd6$B\xce\xf2\xf5\xab7Se\x1e\x03(k\xcf&pp\x93\x97\xdc\xd0K\\D\xb2\x18mjT\xeaWQ\x86\xca7L\x13\xf1\xcf\xf0XjE\xafJ\xc7\x80\xd8\x81\x81_v;\x86\xf4?\r\x8b2pB', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r2 = dup2(r1, r0) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) [ 356.777772] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:39 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:39 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x6) ftruncate(r0, 0x0) 14:28:39 executing program 4: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x1000000) 14:28:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) [ 357.424448] ptrace attach of "/root/syz-executor3"[12424] was attempted by "/root/syz-executor3"[12425] 14:28:39 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x0, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:39 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="240000002600075e1dfffd726fa2830020200a0009000000000001a0f1ffffff0d00ff7e", 0x24}], 0x1}, 0x0) 14:28:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) [ 357.681757] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:39 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x109}, 0x14}}, 0x0) 14:28:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ppoll(&(0x7f0000000000)=[{r0, 0x2100}, {r0, 0x10}, {r1}], 0x3, 0x0, 0x0, 0x0) 14:28:40 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:40 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) 14:28:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 14:28:40 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x0, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:41 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setns(r0, 0x0) [ 358.903438] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:41 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:41 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000002940)={0x2, 0x4e23, @multicast1}, 0x10) 14:28:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:41 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:41 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@allocspi={0xf8, 0x16, 0x607, 0x0, 0x0, {{{@in, @in=@dev}, {@in6=@dev, 0x0, 0x33}, @in6=@ipv4}, 0x0, 0xc3b3}}, 0xf8}}, 0x0) 14:28:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:41 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 359.805829] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:28:41 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x0, 0xffffffffb12cc757, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:41 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001a00010200000000000000000d6ededd"], 0x1}}, 0x0) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/199, 0xc7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 360.028256] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:42 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:42 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:42 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:43 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:43 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0x0, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:43 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:43 executing program 4: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000001c0)="c75b", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f00000002c0), 0x0}, 0x20) [ 361.116990] netlink: 'syz-executor0': attribute type 15 has an invalid length. [ 361.158447] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:43 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 14:28:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:43 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) listen(r0, 0x0) shutdown(r0, 0x0) 14:28:44 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0x0, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:44 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:44 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3, 0xb12e]) flistxattr(0xffffffffffffffff, 0x0, 0x0) readlink(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=""/119, 0x77) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = getpgrp(0xffffffffffffffff) ptrace$peek(0x1, r1, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 362.332552] netlink: 'syz-executor0': attribute type 15 has an invalid length. 14:28:44 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) [ 362.377513] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:44 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x1eem1#+\x00', 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000380)="39c52182d4462a5a71dda2c5cdd8d80cb588079ea6118d4ff31f101140ec17fe072ae71105177ae10be59d0ebbf02e2578208f85b4a589a6cde138a569d9aa89986361508212e99a", 0x48}], 0x1, 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_settime(0x0, &(0x7f0000000040)) 14:28:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:44 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:45 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0x0, 0x10001, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:45 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 14:28:45 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:45 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:45 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 363.373017] protocol 88fb is buggy, dev hsr_slave_0 [ 363.378599] protocol 88fb is buggy, dev hsr_slave_1 [ 363.381006] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:45 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 363.413242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.420024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:28:45 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:45 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) [ 363.535893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:28:45 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:45 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:45 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 363.773290] protocol 88fb is buggy, dev hsr_slave_0 [ 363.778994] protocol 88fb is buggy, dev hsr_slave_1 [ 363.842936] protocol 88fb is buggy, dev hsr_slave_0 [ 363.848473] protocol 88fb is buggy, dev hsr_slave_1 [ 364.085081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 364.141659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:28:46 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757, 0x0, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 364.359746] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:46 executing program 4: getrandom(&(0x7f0000000340)=""/236, 0xec, 0x3) 14:28:46 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x0, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:46 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:46 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:46 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:46 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 364.668071] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:46 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:46 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) 14:28:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:47 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:47 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:47 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x8, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57200000000000000004e2f9663a918fa1efd9b0b"}, 0x7b8}}, 0x0) 14:28:47 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:47 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000001780)=""/4096, 0x1000) readlink(&(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 14:28:47 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:47 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:47 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:47 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:47 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) [ 365.858489] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:48 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0xa6ba0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008040000, 0x3f00000000000759, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) tkill(r0, 0x15) 14:28:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:48 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 14:28:48 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:48 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:48 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:48 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 14:28:48 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 14:28:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:48 executing program 2: vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 14:28:48 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 366.769139] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:48 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x8000000000a) r3 = dup3(r2, r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) write$UHID_INPUT(r3, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) 14:28:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:51 executing program 2: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 14:28:51 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 14:28:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:51 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 369.197344] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:51 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 14:28:51 executing program 2: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 14:28:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:51 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 14:28:51 executing program 2: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 14:28:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 14:28:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:52 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x0) 14:28:52 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:52 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:52 executing program 4: epoll_create(0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x4, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="29b91733d0fdc77ddefe4923413d4604705eae952a8f7b5bca6f33d36e4c63e4bf3744f35dbc6107127c2ccbd3a4e06b614f5141e5f44bca25125031f6e8b155b00e14b6248d7e8280bc0d53e34d8f5b73df65536941f5c3e661c4f882486b11429fb23f2aa2faa5b03eb75247571b5d1ab4939b1a292d10dfa546", 0x7b, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001600)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) connect$rds(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x4e22, @loopback}, 0x10) unshare(0x40000000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)=ANY=[@ANYRES32=0x0], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffffb, 0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffee8}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x6, 0x200, 0x80000001}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000300)={0x1, 0x7, 0x9, 'queue0\x00'}) ioctl(r1, 0x1000008912, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 14:28:52 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:52 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) [ 370.555233] IPVS: ftp: loaded support on port[0] = 21 14:28:52 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 14:28:52 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 370.660184] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) [ 370.874768] IPVS: ftp: loaded support on port[0] = 21 14:28:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:53 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000010], [0x187]}) 14:28:53 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:53 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 14:28:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:28:53 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 14:28:53 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) [ 371.685478] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 14:28:53 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x8, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b57200000000000000004e2f9663a918fa1efd9b0b"}, 0x7b8}}, 0x0) 14:28:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:54 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 14:28:54 executing program 0: syz_open_dev$cec(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) 14:28:54 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 14:28:54 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:28:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) [ 372.795697] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x10) 14:28:54 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [0x40000010], [0x187]}) 14:28:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:55 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000002c0)=0x800, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0186416, &(0x7f0000000300)={0x9, 0x20, 0x0, 0x0, 0x4, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/25, &(0x7f0000000200)=""/59, 0x3000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002cc0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b93c564b636700000000b4ce360000a2", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000006dc0)=[{0x1000000f0ffffff, 0xffffff7f00000000, &(0x7f0000000080)=[{&(0x7f0000000140), 0xfec0}], 0x1}], 0x492492492492670, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) 14:28:55 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [0x40000010], [0x187]}) 14:28:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x80e) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100), 0x0) 14:28:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:55 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 373.836303] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:56 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) syncfs(0xffffffffffffffff) getcwd(0x0, 0x0) getresgid(0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffff9c, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) lchown(&(0x7f0000002c00)='./file0\x00', r1, 0x0) 14:28:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x0, 0x0, [0x40000010], [0x187]}) 14:28:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:56 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:56 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockname(r0, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000440)=0xd0) r2 = dup2(r0, r1) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0xa635) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x67, @rand_addr, 0x0, 0x1, 'sed\x00', 0x0, 0x200}, 0x2c) 14:28:57 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [], [0x187]}) 14:28:57 executing program 4: syz_open_procfs(0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) getpriority(0x1, r0) tkill(r0, 0x1000000000016) 14:28:57 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() write$P9_RVERSION(r0, 0x0, 0xffffffffffffffe6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x57c681bec6957d44) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpgrp(0x0) getpriority(0x0, 0x0) tkill(r1, 0x1000000000016) 14:28:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:57 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) [ 375.910391] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:28:58 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:58 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x80e) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30}, 0x0) 14:28:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [], [0x187]}) 14:28:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:28:58 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:28:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x8, "0327e1b22b5fcef700580f02000000003f420f0000000000b2bdac3fa80acf584ecb5fee496e6866856b76b57200000000000000004e2f9663a918fa1efd9b0b"}, 0x7b8}}, 0x0) 14:28:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [], [0x187]}) 14:28:58 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x5cf3f85e43e4bd6c) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800) 14:29:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:01 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) 14:29:01 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:29:01 executing program 3: r0 = socket$packet(0x11, 0x20000000003, 0x300) write$selinux_attr(r0, 0x0, 0x0) 14:29:01 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 379.064234] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:29:01 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x8e2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1800000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xac\x9bu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8cF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xfaG\x8f\x8e\xd8[T|i$\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)=0x8070000000000) 14:29:01 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) 14:29:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:01 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:01 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) 14:29:01 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x54, 0x0, &(0x7f0000000200)="e460cdfbef24080000000a9386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d500000001ec40210e242f3feeaabe6065584f87ebab1d000000000000000005a07c087a7a5fc944eeba149b", 0x0}, 0x28) 14:29:01 executing program 3: socketpair$unix(0x1, 0x2000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000003500817ee45de087185082cf0300b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) [ 379.680315] netlink: 22 bytes leftover after parsing attributes in process `syz-executor3'. 14:29:01 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) [ 379.777218] netlink: 22 bytes leftover after parsing attributes in process `syz-executor3'. 14:29:02 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:29:02 executing program 4: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x40505331, &(0x7f0000000040)={{0x0, 0xfffffffffffffffb}}) 14:29:02 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) 14:29:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x44e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) creat(0x0, 0x0) memfd_create(0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) alarm(0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0xd8) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 14:29:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:02 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x20000000103, 0x0) semop(r2, &(0x7f0000000080)=[{0x1}, {0x0, 0xffffffff}], 0x2) semop(r2, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 14:29:02 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:02 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) exit_group(0x0) 14:29:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 14:29:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) [ 380.344702] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:29:02 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:03 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:29:03 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) exit_group(0x0) 14:29:03 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) 14:29:03 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f0000000200)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x0, r1+10000000}, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 14:29:03 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) exit_group(0x0) 14:29:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 14:29:03 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:03 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) [ 381.168916] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:29:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000025c0)) [ 381.302755] device nr0 entered promiscuous mode 14:29:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:03 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x56, 0x0, 0x0, {}, {0x20}, @const={0x0, {0x7fff00000000000, 0xffffffffb12cc757}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0xf}]}}}]}, 0x38}}, 0xfffffffffffffffc) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0) 14:29:03 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) 14:29:03 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:03 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x1000) 14:29:04 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) 14:29:04 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 382.016097] netlink: 'syz-executor1': attribute type 15 has an invalid length. 14:29:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x0, 0x3}, @mss={0x2, 0x3}], 0x2) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x2710}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) flistxattr(r1, &(0x7f0000001780)=""/4096, 0x1000) readlink(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=""/119, 0x77) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') ptrace$peek(0x1, 0x0, &(0x7f0000000140)) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 14:29:04 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) 14:29:04 executing program 2: pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x33c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 14:29:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080), 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x10e755) 14:29:04 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2a8975842c4c27d794e0066420fe2e3c442019dccf2436f400ffcc6") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11000, 0x0) exit_group(0x0) [ 382.486214] ================================================================== [ 382.493635] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 382.500146] CPU: 0 PID: 13228 Comm: syz-executor3 Not tainted 5.0.0-rc1+ #9 [ 382.507242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.516602] Call Trace: [ 382.519236] dump_stack+0x173/0x1d0 [ 382.522886] kmsan_report+0x12e/0x2a0 [ 382.526742] kmsan_internal_check_memory+0x465/0xb10 [ 382.531879] kmsan_copy_to_user+0xab/0xc0 [ 382.536058] _copy_to_user+0x16b/0x1f0 [ 382.539998] snd_pcm_oss_read+0xd4a/0x1960 [ 382.544307] ? snd_pcm_oss_unregister_minor+0x4b0/0x4b0 [ 382.549723] __vfs_read+0x1e5/0xbf0 [ 382.553386] ? security_file_permission+0x521/0x660 [ 382.558424] ? rw_verify_area+0x35e/0x580 [ 382.562621] vfs_read+0x359/0x6f0 [ 382.566130] __se_sys_read+0x17a/0x370 [ 382.570058] __x64_sys_read+0x4a/0x70 [ 382.573881] do_syscall_64+0xbc/0xf0 [ 382.577612] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 382.582832] RIP: 0033:0x457e39 [ 382.586054] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.604968] RSP: 002b:00007f1f1c17cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.612689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 382.619962] RDX: 0000000000001000 RSI: 0000000020000240 RDI: 0000000000000003 [ 382.627233] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 382.634509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f1c17d6d4 [ 382.641778] R13: 00000000004c4a7d R14: 00000000004d83e8 R15: 00000000ffffffff [ 382.649064] [ 382.650720] Uninit was created at: [ 382.654257] No stack [ 382.656578] [ 382.658224] Bytes 2584-2591 of 4096 are uninitialized [ 382.663413] Memory access of size 4096 starts at ffff88807dc97000 [ 382.669641] Data copied to user address 0000000020000240 [ 382.675098] ================================================================== [ 382.682460] Disabling lock debugging due to kernel taint [ 382.687903] Kernel panic - not syncing: panic_on_warn set ... [ 382.693794] CPU: 0 PID: 13228 Comm: syz-executor3 Tainted: G B 5.0.0-rc1+ #9 [ 382.702282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.711624] Call Trace: [ 382.714224] dump_stack+0x173/0x1d0 [ 382.717857] panic+0x3d1/0xb01 [ 382.721079] kmsan_report+0x293/0x2a0 [ 382.724890] kmsan_internal_check_memory+0x465/0xb10 [ 382.730033] kmsan_copy_to_user+0xab/0xc0 [ 382.734190] _copy_to_user+0x16b/0x1f0 [ 382.738091] snd_pcm_oss_read+0xd4a/0x1960 [ 382.742357] ? snd_pcm_oss_unregister_minor+0x4b0/0x4b0 [ 382.747723] __vfs_read+0x1e5/0xbf0 [ 382.751368] ? security_file_permission+0x521/0x660 [ 382.756395] ? rw_verify_area+0x35e/0x580 [ 382.760578] vfs_read+0x359/0x6f0 [ 382.764056] __se_sys_read+0x17a/0x370 [ 382.767963] __x64_sys_read+0x4a/0x70 [ 382.771758] do_syscall_64+0xbc/0xf0 [ 382.775489] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 382.780681] RIP: 0033:0x457e39 [ 382.783869] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.802774] RSP: 002b:00007f1f1c17cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.810489] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e39 [ 382.817760] RDX: 0000000000001000 RSI: 0000000020000240 RDI: 0000000000000003 [ 382.825023] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 382.832285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f1c17d6d4 [ 382.839548] R13: 00000000004c4a7d R14: 00000000004d83e8 R15: 00000000ffffffff [ 382.847818] Kernel Offset: disabled [ 382.851444] Rebooting in 86400 seconds..