0]}}}) 17:25:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) [ 1868.881262][T28840] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:25:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0xffffff1f, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:25:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe4660100], [], @empty}}]}, 0x28}}, 0x0) 17:25:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:25:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x0, 0xfecaedfe00000000]}}}) [ 1869.081176][T28853] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:25:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:25:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x2, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'team_slave_1\x00', {0x2, 0x4e21, @local}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xf, &(0x7f0000000140)=""/41, &(0x7f0000000180)=0x29) readv(r2, &(0x7f0000000440), 0x0) r4 = eventfd2(0x7, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000001c0)={'bcsh0\x00', {0x2, 0xfff, @empty}}) r6 = dup2(r4, r2) fcntl$setown(r0, 0x8, r1) tkill(r1, 0x1000000000000014) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0xdee2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x96f, 0x3ff, 0x0, 'queue1\x00', 0x5}) 17:26:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40906", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe4ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:26:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x0, 0xff00000000000000]}}}) 17:26:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x3, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) [ 1871.792227][T28883] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x2]}) 17:26:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe5660100], [], @empty}}]}, 0x28}}, 0x0) 17:26:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x5, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1872.092108][T28904] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x14000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000280)={{0x9, 0x9, 0x8, 0x0, 0x100, 0x1}, 0x5ed0, 0x9, 0xffffffffffff8000, 0x3, 0xd2f, "5439b1a0f02b0731d743b61e412349b1228c8c82974657395e0be433d2c6b0d6021be45db03af34a8a04fd729d574916182a3b2eb959f1a44442e0f117bd4d243a713bfc06a34e8b04413e9dc0e91e2e2a871bcd29791172f09e22d9a0be069eb078b658fbff69e1764bb28c213dab2d8c269a6cf9884d40006146f323783607"}) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x3]}) 17:26:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40980", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe6660100], [], @empty}}]}, 0x28}}, 0x0) 17:26:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x4]}) 17:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x6, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) [ 1872.428467][T28926] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x200, 0x0) r3 = open(&(0x7f0000000640)='./file0\x00', 0x248400, 0x8) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000680)={0x3, 0x0, 0x3f}) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000140)=0x9) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000080)={0x7, 0x9}) r4 = inotify_init1(0x0) readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000740)=""/166, 0xa6}, {&(0x7f0000000540)=""/98, 0x62}], 0x5) process_vm_readv(r1, &(0x7f0000000800)=[{&(0x7f0000000480)=""/185, 0xb9}], 0x1, &(0x7f0000003c80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/209, 0xd1}, {&(0x7f0000002940)=""/223, 0xdf}, {&(0x7f0000002a40)=""/204, 0xcc}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/234, 0xea}, {&(0x7f0000003c40)=""/4, 0x4}], 0x8, 0x0) r5 = eventfd2(0x7, 0x0) r6 = dup2(r5, r4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000006c0), &(0x7f0000000700)=0x4) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x1, 0x2fba, 0x1, 0x0, 0x0, 0x400, 0x10, 0x8, 0x8, 0x2000000000002, 0xfffffffffffffff9, 0x800, 0xfffffffffffffffa, 0x9, 0x1, 0x4, 0x1e5, 0x2, 0x51b, 0x1, 0x3, 0xfffffffffffffffb, 0x2, 0x0, 0x1, 0x8, 0x0, 0x3, 0x40, 0x9, 0x8c, 0x7, 0x52a, 0x7c, 0x0, 0x8000, 0x0, 0x800000, 0x7, @perf_config_ext={0x81}, 0x200, 0x1, 0x6, 0xb, 0x4, 0x1, 0x3}, 0x0, 0xb, r6, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000003d00)='./file0\x00', &(0x7f0000003d40)='trusted.overlay.upper\x00', &(0x7f0000003d80)=ANY=[@ANYBLOB="047fa7b05652b2bc1e1060370f480512fec5aa003f47b47af14157d4c466fe6c224230f5ccd5c22807c97a7885f26f3e8e61694d5f480dcc31b3054adce57b6a56ee36c90f89efe8c23e419cd726432b8f690aa3ab"], 0x58, 0x3) tkill(r1, 0x1000000000000014) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) ioctl$CAPI_GET_FLAGS(r6, 0x80044323, &(0x7f0000000200)) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) 17:26:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40980", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x8, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x5]}) 17:26:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe7660100], [], @empty}}]}, 0x28}}, 0x0) 17:26:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1872.753262][T28948] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x9, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) tkill(r1, 0x1000000000000014) 17:26:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x6]}) 17:26:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe8660100], [], @empty}}]}, 0x28}}, 0x0) [ 1872.894280][ C1] net_ratelimit: 14 callbacks suppressed [ 1872.894288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1872.894294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1872.894353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1872.900108][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1872.923110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1872.929062][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) 17:26:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40905", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1873.046346][T28967] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xa, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) openat$cgroup_int(r0, &(0x7f0000000140)='cpu.weight\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x800) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) r4 = eventfd2(0x7, 0x0) dup2(r4, r2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) ioprio_set$uid(0x3, r5, 0x772b) tkill(r1, 0x1000000000000014) ptrace(0x11, r1) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000480)=""/4096) 17:26:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x7]}) 17:26:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe9660100], [], @empty}}]}, 0x28}}, 0x0) 17:26:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xb, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) [ 1873.351548][T28988] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x8]}) 17:26:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40988", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xea660100], [], @empty}}]}, 0x28}}, 0x0) 17:26:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x300]}) 17:26:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40988", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) 17:26:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x10, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1873.756428][T29012] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x500]}) 17:26:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xeb660100], [], @empty}}]}, 0x28}}, 0x0) 17:26:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x11, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x600]}) [ 1874.081520][T29029] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1874.094345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1874.100199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1874.814278][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1874.820071][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:26:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) 17:26:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x12, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40988", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:06 executing program 5: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() r1 = inotify_init1(0x0) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r2 = eventfd2(0x7, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r3 = dup2(r2, r1) tkill(r0, 0x1000000000000014) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x8c29, 0xffffffffb3f59a73, 0x6, 0x3}}) 17:26:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xec660100], [], @empty}}]}, 0x28}}, 0x0) 17:26:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x700]}) [ 1876.574104][T29045] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b4090e", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x2000]}) 17:26:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x13, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xf0ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:26:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) 17:26:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40935", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") fstatfs(r0, &(0x7f00000001c0)=""/78) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000140)='*+*vmnet0\x00', &(0x7f0000000180)="d90db0909e4800c533d2ef4680af6ea0a493e5a87f496b989cf6397cdb3bae99ed224e7b7f9cdd85589b60bdeb64aae4158296478cc1", 0x36) r4 = eventfd2(0x7, 0x0) r5 = dup2(r4, r2) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000280)) tkill(r1, 0x1000000000000014) 17:26:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x14, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1876.877329][T29069] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x4000]}) 17:26:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfdffffff], [], @empty}}]}, 0x28}}, 0x0) 17:26:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) 17:26:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0xff00]}) 17:26:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="cddca5055e0bcfec7b9b775196ab5e7d1e2e8696e36a50c64b7b25e601bef2c6929fc73557706df26b738687469edd385a0cff5d746ed6053be8801ce4f9b88c8e10db57e35bd7bdc40755c28946be65f201668f59e6b7d0401e5d18064ff160e7b67de30a5da50c5542202b6ff5f68899f137481d2ca721f4d20d0cbfe8f1daf0d95c0aa2ac94e6479229d62c7b2db81d1e1762475e907e141d3027742b24ed80a6081f9b4bf22c756e43f0c33bf9e92cbf7e1a2b50df8c10e36cdbc940dade1c0dd70efd8bd9b79cf6eeb48c5c28ce") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r0) tkill(r1, 0x1000000000000014) [ 1877.195206][T29089] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfeffffff], [], @empty}}]}, 0x28}}, 0x0) 17:26:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40947", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x300, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x1000000]}) [ 1877.465044][T29113] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40948", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) 17:26:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfffff000], [], @empty}}]}, 0x28}}, 0x0) 17:26:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x500, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x2000000]}) 17:26:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40964", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1877.714148][T29128] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x600, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x3000000]}) 17:26:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40906", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:26:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xffffff7f], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x900, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xa00, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1878.248312][T29148] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1878.256663][ C1] net_ratelimit: 15 callbacks suppressed [ 1878.256672][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1878.256730][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x4000000]}) 17:26:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xffffff97], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:26:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xb00, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)={0x10002, 0x0, [0x1, 0x2f34393d, 0x1ff, 0x7, 0xfffffffffffffffc, 0x80, 0x81, 0x1]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x5000000]}) [ 1878.551985][T29169] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xffffff9e], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x6000000]}) 17:26:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf00, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) [ 1878.818811][T29190] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xffffffe4], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = syz_open_dev$usb(&(0x7f0000001840)='/dev/bus/usb/00#/00#\x00', 0x1, 0x24400) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001980)={&(0x7f0000001880)=""/253, 0x23000, 0x1000, 0x7}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)=r1) r4 = eventfd2(0x7, 0x0) dup2(r4, r3) tkill(r2, 0x1000000000000014) [ 1878.974280][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1878.980172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1879.004124][T29201] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1100, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x7000000]}) 17:26:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfffffff0], [], @empty}}]}, 0x28}}, 0x0) 17:26:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1879.134263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1879.134331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1879.140080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1879.145852][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1879.151693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1879.163173][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000200)="aa1721e6e6c5e093dca5b2") r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = dup2(r3, r2) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000180)={0x9, 0xde31, 0x8}) tkill(r1, 0x1000000000000014) rt_sigprocmask(0x0, &(0x7f0000000100)={0x7}, &(0x7f0000000140), 0x8) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 17:26:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) 17:26:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x8000000]}) [ 1879.278079][T29222] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1200, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfffffffd], [], @empty}}]}, 0x28}}, 0x0) 17:26:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x20000000]}) 17:26:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1300, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1879.589867][T29245] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) 17:26:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfffffffe], [], @empty}}]}, 0x28}}, 0x0) 17:26:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1400, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1879.856609][T29263] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) r3 = eventfd2(0x4, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x2963, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x40000000]}) 17:26:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x1000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) [ 1882.454789][T29279] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0xfecaedfe]}) 17:26:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) 17:26:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x6087ffffffff], [], @empty}}]}, 0x28}}, 0x0) 17:26:12 executing program 5: r0 = inotify_init() ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x1, 0x0, [], [{0x8, 0xfffffffffffffffa, 0xc9b7, 0x4, 0x2, 0xfffffffffffffffc}, {0x944, 0x7, 0x47ab67bb, 0x1, 0xffffffff, 0x6}], [[]]}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="2f0000000600080000000000000000000460a175e5a2fb9d82bbce480500000000000000005b2d7070703100"], 0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() r4 = inotify_init1(0x0) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/189, 0xbd}, {&(0x7f00000005c0)=""/4, 0x4}, {&(0x7f0000000600)=""/145, 0x91}], 0x6) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = eventfd2(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r5, 0x200}, {r4, 0x100}, {r2, 0x20}, {r5, 0x8000}, {r4, 0x2080}, {r4, 0x1001}, {r4, 0x8000}, {r4, 0x2}, {r2, 0x1048}, {r2}], 0xa, &(0x7f00000001c0)={r6, r7+30000000}, &(0x7f0000000200), 0x8) r8 = dup2(r5, r4) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x40}) tkill(r3, 0x39) 17:26:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0xfeedcafe]}) 17:26:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x6329, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1882.838334][T29305] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x1000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) 17:26:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = request_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='[\xb2system}\'(\x00', 0xfffffffffffffff9) r2 = request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000280)='$\x00', 0xffffffffffffffff) keyctl$reject(0x13, r1, 0x6476, 0x5ce5, r2) r3 = gettid() r4 = inotify_init1(0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xffffff50}], 0x1) r5 = eventfd2(0x7, 0x0) dup2(r5, r4) tkill(r3, 0x1000000000000014) 17:26:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0xff000000]}) [ 1883.062983][T29323] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x3000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x30000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) [ 1883.294273][ C1] net_ratelimit: 14 callbacks suppressed [ 1883.294281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1883.294327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1883.299997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1883.319081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1883.326722][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x12000000000, &(0x7f0000000140)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x34000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1883.509652][T29348] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x40030000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) 17:26:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x100000000000000]}) 17:26:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0xfffffffffffffffe, @tid=r1}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x400300, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1883.760714][T29365] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xf0ffffffffffff], [], @empty}}]}, 0x28}}, 0x0) 17:26:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x200000000000000]}) 17:26:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:26:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf0ffff, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1884.008774][T29382] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x100000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x300000000000000]}) [ 1884.203632][T29395] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x200000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1884.449688][T29409] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1884.494257][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1884.500082][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1885.214306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1885.220127][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1885.374305][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x80000) write$P9_RWRITE(r1, &(0x7f0000000140)={0xb, 0x77, 0x2, 0xc34}, 0xb) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) close(r4) 17:26:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x400000000000000]}) 17:26:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x2000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x300000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x500000000000000]}) [ 1887.019206][T29422] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x3000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x400000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000140)={{}, {r5, r6+10000000}}, &(0x7f0000000180)) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) close(r4) 17:26:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x600000000000000]}) [ 1887.408932][T29443] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x800000000006) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000140), 0x4) r4 = eventfd2(0x7, 0x0) dup2(r4, r2) tkill(r1, 0x1000000000000014) 17:26:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x500000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x5000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) close(r4) 17:26:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x700000000000000]}) 17:26:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) dup2(r3, r2) tkill(r1, 0x1000000000000014) [ 1887.768295][T29468] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x6000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x600000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x800000000000000]}) 17:26:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x8000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1888.067932][T29485] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) close(r4) 17:26:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x54, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x26}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="d1af24c49dcd4b6167fba9ce153d2b1e"}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x7dc1bf2d26db0636}, 0x8000) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40220102}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x300, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x4080) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = eventfd2(0x7, 0x0) dup2(r5, 0xffffffffffffffff) tkill(r3, 0x1000000000000014) 17:26:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x700000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x9000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x2000000000000000]}) 17:26:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1888.328520][T29503] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xa000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) close(r4) 17:26:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl(r0, 0x1000008912, &(0x7f0000000100)="c070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x4000000000000000]}) 17:26:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1888.654268][ C1] net_ratelimit: 14 callbacks suppressed [ 1888.654277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1888.665831][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1888.687011][T29529] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xa00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xb000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) fchown(r2, r3, r4) r5 = eventfd2(0x7, 0x0) dup2(r5, r2) tkill(r1, 0x1000000000000014) 17:26:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0xfecaedfe00000000]}) 17:26:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r4) 17:26:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1888.956048][T29546] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0xff00000000000000]}) 17:26:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x10000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) [ 1889.198499][T29562] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:19 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x2]}) 17:26:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) close(r4) 17:26:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xf00000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1889.374304][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1889.380178][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:26:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x11000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:19 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x3]}) 17:26:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x12000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1889.534284][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1889.534326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1889.540090][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1889.551692][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1889.557579][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1889.564099][T29582] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x1f00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) close(r4) [ 1889.808616][T29599] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1890.734319][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xe2, "1c597255694fed248bda0ce521727b0fab9888472aa1c9d1dd6bd37a170de5a6c84f9122d1895e6b542e20399035c7b400dee495270c5cdac39727d25b85f444eea219a3fcb8c220a4974d13e6df234139ec35419d1503453b6d1d62f8857dd55e962d24f77f27652f6a3a7464b10c39d46fec00e804e98461629cfb5cc64790198c674dcc1bd905886d7c3935e1bf08d07a0c14ab44f6180396ac5c9c44e06d22835e257f14f21049f5374e4eae84d9fb52b15e0ff2088e1f7aaa980a790e3b7eea543839fd171dbfb2e668b27d54a97859d58b3197baef49973ae2861fc0ec6466"}, &(0x7f0000000280)=0xea) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0xffffffff, 0x5}, 0x8) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x4]}) 17:26:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x13000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x2000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) close(r4) 17:26:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x5]}) [ 1892.398397][T29618] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40988", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x14000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) close(r4) 17:26:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x260f000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x6]}) 17:26:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='trusted.overlay.redirect\x00', &(0x7f00000005c0)='./file0\x00', 0x8, 0x3) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x400002) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x120) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f00000004c0)=""/106) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000280)=""/189, 0xbd}], 0x1) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000400)=0x4) r6 = eventfd2(0x7, 0xffffffffffffffff) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000340)=""/171, &(0x7f0000000080)=0xab) mq_notify(r7, &(0x7f0000000040)={0x0, 0x1b, 0x2, @tid=r2}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000180)={0x100000, &(0x7f0000000140), 0x1, r6, 0xc}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x800, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x3f, 0x0, r8}, {0x2f9, 0x7, 0x3, 0xffffffff, 0x2, 0x2, 0x4, 0x80}, {0x80000001, 0x9, 0x1f, 0x2}, 0x3, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4d3}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x3, 0x7d2680308c7b047, 0x4, 0x10000, 0x4, 0x8000}}, 0xe8) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000007c0)=r7) dup2(r0, r3) tkill(r2, 0x28) 17:26:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40988", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x40000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1892.695567][T29638] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x7]}) 17:26:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x3f00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) close(r4) 17:26:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x63290000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1892.969361][T29657] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40986", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x8]}) 17:26:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x4000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) flock(r0, 0x2) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffff) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x10001, 0x400001) 17:26:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x9effffff, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) close(r4) 17:26:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x300]}) 17:26:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x4800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf0ffffff, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x80, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000280), 0x4) r3 = dup2(r0, r0) ioctl$TIOCSCTTY(r3, 0x540e, 0x4000000003) r4 = gettid() r5 = inotify_init1(0x800) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r6 = eventfd2(0x7, 0x0) dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000180)={0x5, 0x100000000, 0x3ff, {}, 0x1, 0x1}) tkill(r4, 0x1000000000000014) 17:26:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b4098d", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x500]}) 17:26:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) close(r4) [ 1893.599582][T29702] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xfffff000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x4c00000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1893.694281][ C1] net_ratelimit: 13 callbacks suppressed [ 1893.694290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1893.694325][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1893.700154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1893.717507][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1893.723383][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x600]}) 17:26:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84800) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101000) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x200, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10000, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='status\x00') openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000480)=ANY=[@ANYBLOB="000a000000000015"]) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000004c0)) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4, 0x101880) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x7, @mcast1, 0x1ff}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x19}}, @in={0x2, 0x4e21, @rand_addr=0x2}, @in6={0xa, 0x1, 0x9, @rand_addr="368f879516e10a70c4f4441a717f8450", 0x99}, @in6={0xa, 0x4e20, 0x400, @local, 0x101}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}], 0xb0) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xffffff7f, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409f5", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x700]}) [ 1893.972735][T29728] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) close(r4) 17:26:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x6000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xffffff9e, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x2000]}) 17:26:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) dup2(r3, r2) tkill(r1, 0x1000000000000014) [ 1894.242581][T29747] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xfffffff0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x6800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) close(r4) 17:26:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = semget(0x3, 0x1, 0x0) semtimedop(r1, &(0x7f0000000100)=[{0x1, 0xa67}, {0x3, 0x2, 0x1000}, {0x7, 0x7fffffff, 0x1800}, {0x1, 0x8000, 0x800}, {0x0, 0x49a8, 0x1800}, {0x2, 0xfffffffffffffff7, 0x1000}], 0x6, &(0x7f0000000140)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x484d6edc, 0x8, 0x87, &(0x7f0000000280)="3e89ff478676046e71b9a0fdfd1e18d9f2b047b7680a37fd120556be888b976a649aa76fd9c49b374a2e515466b45b1fcba79a4357f2a538ffb32439e246990b12fbd9c8b80b7631e0bd27e436a3551bc796102937af5d056041d6ff0face6992b1ff8e459c58591fa3c374b1dbc20281c7e08d332b5170d88aaa13502321d78fbd47d29f72422"}) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = eventfd2(0x7, 0x0) dup2(r5, r3) tkill(r2, 0x1000000000000014) 17:26:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x4000]}) [ 1894.551174][T29764] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0xff00]}) 17:26:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x37, 0x0, @thr={&(0x7f0000000100)="cf57e7aa866d196bc18edf2c9b6ade4550c6fad824d396bb45fa2c223e08211a9708075e62ce7e5f99aaaef03998c96fc4e1a911471945171523a3c3285ad67a80efbc28dc310b45174658ad58bec9a5eb355f118bb6d8da76e5fb650e020bc266073ad4895aafb1177eb30c876879bb87838782ccef022bd3796932ccb30c9d913d4c28433b065266d976c4193049c99e85177b32ae46ae0598a76b1cc9e07bb8e82ba0a4b6e8f27691444af9a15325b1957d153a245444c2532e301d7d4ec90ec745b37cdb", &(0x7f0000000280)="4c209879d700a90c641afefc84092ac3d451f8028207768bafbbe47bbc90b28e95d587b54dfbfcda84ccbc433b6d30abcdb251642b4d8aae9e6b302c4f0f99712781aec8d2756c35387ebe065fe17bded33c4c49d7d86956d9acd68bc894555bb19787154df81c6d5a932d9d4ba28dcb07f85fa176e325d882c326ef77da0a32285a2c99079c9369d03d02a04cdea81945a579bb28e300b1ebb05687f18a7d920efc54ca241203101a959923fe3707c2cf7092a67fdabae1a26332134111ccbb7e7087618b995bbeb48ce1676e088e7167340c456a5188be36ff44df7e248100627429c6"}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = dup2(r3, r2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c962308", @ANYRES16=r5, @ANYBLOB="000529bd7000fcdbdf25060000003800020004000400080002008d00000004000400080002000500000004000400080001001f0000fd08000100000000000800010006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) tkill(r1, 0x1000000000000014) 17:26:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x3000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) close(r4) 17:26:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x6c00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x1000000]}) [ 1894.894259][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1894.900097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1894.920688][T29795] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x40030000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f00000000c0)="c0d8a5055e0bcfec7be070") r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) munlock(&(0x7f0000023000/0x1000)=nil, 0x1000) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000580)={0x7, 0x1, 0xbec0000000000000, 0x74, &(0x7f00000001c0)=""/116, 0xad, &(0x7f0000000480)=""/173, 0x4, &(0x7f0000000540)=""/4}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000080)={0x8, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = inotify_init1(0x0) readv(r6, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r7 = eventfd2(0x7, 0x0) r8 = dup2(r7, r6) tkill(r2, 0x41) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x9, @remote, 0x100000000}, {0xa, 0x4e21, 0x3, @remote, 0x2}, 0xa34, [0x200, 0x13a, 0x0, 0x800, 0x5, 0x2, 0x8, 0x2]}, 0x5c) 17:26:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x7400000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) close(r4) 17:26:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf0ffffffffffff, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x2000000]}) [ 1895.265177][T29815] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x3000000]}) 17:26:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x7a00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x100000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) 17:26:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x4000000]}) [ 1895.614299][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1895.620182][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1895.774281][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x100, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x200000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x97ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:26:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x5000000]}) 17:26:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x300000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1895.920109][T29858] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x6000000]}) 17:26:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x9effffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) 17:26:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x101000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x11}, 0x5}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, @in6={0xa, 0x4e24, 0x8, @local, 0x76}], 0x74) r2 = gettid() r3 = inotify_init1(0x0) syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffb, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180), 0x0, 0x356a000000}, {&(0x7f0000000200)="8015e4274e49f4dddcd9851adecd153c95b68975061478998f2371add669446807ca1c", 0x23, 0x20}], 0x850000, &(0x7f0000000340)=':\x00') readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x400000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1896.196337][T29878] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xce09000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x7000000]}) 17:26:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x500000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1896.466051][T29894] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:26:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x600000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x8000000]}) 17:26:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe166010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) eventfd2(0x7, 0x0) dup2(r2, r0) tkill(r1, 0x1000000000000014) 17:26:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) 17:26:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe266010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x800000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x20000000]}) 17:26:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x900000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe366010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x40000000]}) 17:26:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) 17:26:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x468f75dc, 0x0) r4 = dup2(r3, r0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) tkill(r1, 0x1000000000000014) 17:26:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xa00000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0xfecaedfe]}) 17:26:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe466010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) 17:26:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0xfeedcafe]}) 17:26:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xb00000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe4ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) 17:26:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0xff000000]}) [ 1898.074899][T29988] validate_nla: 4 callbacks suppressed [ 1898.074910][T29988] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="c047ef5ecaa213932b56f52315c6b2f315bb2100000000") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000001c0)) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x8000) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000140)=0x1) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf00000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe566010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x100000000000000]}) 17:26:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) [ 1898.783938][T30008] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1000000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x200000000000000]}) 17:26:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe666010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1100000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r2 = eventfd2(0x7, 0x0) dup2(r2, 0xffffffffffffffff) tkill(r1, 0x1000000000000014) 17:26:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) [ 1899.054297][ C1] net_ratelimit: 14 callbacks suppressed [ 1899.054306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.066192][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1200000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe766010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x300000000000000]}) 17:26:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000000, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = dup2(r3, r2) tkill(r1, 0x1000000000000014) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) [ 1899.347385][T30053] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1300000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) 17:26:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x400000000000000]}) 17:26:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe866010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x1400000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = inotify_init1(0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = eventfd2(0x7, 0x0) dup2(r5, r4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100)="ea17ac56bcc0e19fb95354dc1af3a87a684d04f5a466ef22276a2091fa24d30491a060daeb288f0d8afe37dcae", &(0x7f0000000140)="1251e4770adb"}, 0x20) tkill(r1, 0x1000000000000014) [ 1899.678024][T30071] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x500000000000000]}) 17:26:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe966010000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1899.774269][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.780453][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:26:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) 17:26:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x4000000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1899.934254][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.934260][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.934320][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1899.940864][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1899.959061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1899.964961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1899.987315][T30089] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$selinux_context(r3, &(0x7f0000000140)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x24) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) dup2(r4, r2) tkill(r1, 0x1000000000000014) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 17:26:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x600000000000000]}) 17:26:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xea66010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:26:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x6329000000000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x700000000000000]}) 17:26:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1900.332516][T30115] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) signalfd4(r3, &(0x7f0000000100), 0x8, 0x800) 17:26:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x9effffff00000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x800000000000000]}) 17:26:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xeb66010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xf0ffffff00000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:26:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x2000000000000000]}) 17:26:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1900.775303][T30141] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xffffff7f00000000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = dup2(r3, r2) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000100)={0x6, "931dced5b0569f997bec88bcb345e0ddd5ef9bc3eac16674c367c65bafb03701", 0x1, 0x1}) tkill(r1, 0x1000000000000014) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f00000003c0)={r5, 0x3}) write$9p(r3, &(0x7f0000000280)="2eac91a1cf58c73206f649f58168ffeeb5ea8f662543aab98d3b04998ba34e029f78173302016cc739cc25653ee42a73dcce24097ea921efaca1c9e4f0d7d555963f3d68f3399bb0589b341eac45d9f605a7bce387fd7cf9645fa385fc70f8a0a27d67ec1118b6e500b034e3941838a240eaed0df01969582f39933dd316604a3fe40ad7a8a99f5086996c604e324ce694fb4096d28e", 0x96) write$P9_RREMOVE(r2, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) 17:26:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x2, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xec66010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x4000000000000000]}) 17:26:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) [ 1901.102519][T30165] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x4, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0xfffffffffffff000, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xf0ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0xfecaedfe00000000]}) 17:26:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x6, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x2, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1901.440867][T30187] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) 17:26:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0xff00000000000000]}) 17:26:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x7, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x3, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfdffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x2]}) 17:26:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) [ 1901.773976][T30210] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1904.094312][ C1] net_ratelimit: 14 callbacks suppressed [ 1904.094322][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1904.094344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1904.100107][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1904.105869][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1904.111630][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1904.128771][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x511600, 0x0) epoll_pwait(r2, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x6, &(0x7f00000001c0)={0x1a68}, 0x8) r3 = gettid() r4 = inotify_init1(0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = eventfd2(0x7, 0x0) dup2(r5, r4) tkill(r3, 0x1000000000000014) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) 17:26:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x8, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfeffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x3]}) 17:26:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) 17:26:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1904.470134][T30232] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x4]}) 17:26:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xffffff7f00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) 17:26:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x4, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1904.711557][T30248] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1905.294303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1905.300125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1906.014319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1906.020115][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:26:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x8, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xffffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:26:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x5]}) 17:26:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x6, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) 17:26:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x4, 0xdf000000000000, 0x5606c72, 0x3f, 0x6}, &(0x7f0000000180)=0x14) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x314, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x9}, 0x8) r4 = gettid() r5 = inotify_init1(0x0) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r6 = eventfd2(0x7, 0x0) dup2(r6, r5) tkill(r4, 0x1000000000000014) [ 1907.547441][T30268] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x6]}) 17:26:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x27, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x9, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xffffffff87600000], [], @empty}}]}, 0x28}}, 0x0) 17:26:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200002, 0x100) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000280)=""/138) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x0) r4 = eventfd2(0x7, 0x0) dup2(r4, r2) tkill(r1, 0x1000000000000014) 17:26:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xa, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1907.798234][T30285] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x7]}) 17:26:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) 17:26:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xfffffffffffff000], [], @empty}}]}, 0x28}}, 0x0) 17:26:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x28, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xb, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1908.037420][T30299] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x8]}) 17:26:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x29, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) 17:26:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x2], [], @empty}}]}, 0x28}}, 0x0) 17:26:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x300]}) 17:26:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2c, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1908.381213][T30324] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x10, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x3], [], @empty}}]}, 0x28}}, 0x0) 17:26:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) tkill(r1, 0xa) ioctl(r0, 0x4, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) r4 = dup2(r3, r3) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x12, 0x51, &(0x7f0000000140)="517b8c7c51ac0abbf2c5b07b7f1d8c26e7c603fff9968e5184fb4bd6fa0295f7823406dffe007e6243afbf7270e3960c9490811e13bdf9312c52e4dec52779601c3862d8158c193e0ff2e71cd7842c4fc0"}) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = eventfd2(0x7, 0x0) dup2(r5, r3) tkill(r2, 0x1000000000000014) 17:26:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:26:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x500]}) 17:26:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x11, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1908.604505][T30338] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2f, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4], [], @empty}}]}, 0x28}}, 0x0) 17:26:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x12, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = open(&(0x7f0000000200)='./file0\x00', 0x80100, 0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) accept$alg(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = gettid() r4 = inotify_init1(0x800) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r5 = eventfd2(0x7, 0x0) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r6) dup2(r5, r4) tkill(r3, 0x1000000000000014) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x4010, r0, 0x180000000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') 17:26:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x600]}) 17:26:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) close(r4) 17:26:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x33, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1908.925143][T30357] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1909.038907][ T26] audit: type=1400 audit(1561656398.886:189): avc: denied { map } for pid=30364 comm="syz-executor.5" path="socket:[357804]" dev="sockfs" ino=357804 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 17:26:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = dup(r2) r4 = eventfd2(0x7, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000140)=""/1) r5 = dup2(r4, r2) tkill(r1, 0x1000000000000014) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000100)) 17:26:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x700]}) 17:26:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x13, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x5], [], @empty}}]}, 0x28}}, 0x0) 17:26:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x3a, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) close(r4) 17:26:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x2000]}) 17:26:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x14, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1909.327730][T30386] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x3b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6], [], @empty}}]}, 0x28}}, 0x0) [ 1909.454266][ C1] net_ratelimit: 15 callbacks suppressed [ 1909.454275][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1909.465947][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000005440)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005540)={0x0, 0x0}, &(0x7f0000005580)=0xc) lstat(&(0x7f00000055c0)='./file0\x00', &(0x7f0000005600)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005c40)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000005d40)=0xe8) fstat(r3, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000006180)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000061c0)={{r12, r13+10000000}, {0x77359400}}, &(0x7f0000006200)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005e00)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000005f00)=0xe8) fstat(r0, &(0x7f0000005f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = geteuid() getresgid(&(0x7f0000005fc0), &(0x7f0000006000), &(0x7f0000006040)=0x0) sendmsg$netlink(r5, &(0x7f0000006140)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005b80)=[{&(0x7f0000000280)={0xc8, 0x16, 0x901, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x18, @u32=0x6}, @generic="b89469cdbd7d11fdfcb637f72bde24b18f8e14d0dc2227c4ac460c447d8a904146796321d94841a93d2b47ec94f74ac30f4464206608f6eff396d278178e9cf8d15c980acae218dabed93c3a358aad5a13638d2358d76588da7b9e1be7a895b0fc19a955feda7a4aff43d929e6020754659aaa691b71bd8dad750bbe8c1e7b72f70928b134b76f5d03302c0604d80e704fedee1b7fb6d004fd8cef7bcd09b01e04498383e19196800bf60ee5f9"]}, 0xc8}, {&(0x7f0000000480)={0x1f0, 0x1c, 0x200, 0x70bd27, 0x25dfdbfb, "", [@nested={0x1e0, 0x61, [@generic="f055fd6d789850f51673151349f91bc31662eb1a27f0ba1b0a84a076f86ff1b1a782893b6aa0cc4fc47f3b60235a4477a554f92f8d93f6a5537dc4ce8aea9f9fb14152eaccd1fbe82f52efe19d97eb0787efdd57a3bedc82f4c5ed83bb75cd5e2d4d2fb3425aa3ccf1d0203a9d7b813bea2f6aa0d428a7c4758afd609b1923a690135d686b6d2ac151c9b2e56e69f916aa5827e37d21e4f59c18b54879240e00f0cdd244c71d71ab6cc7f14481da0cea0b", @typed={0x28, 0xfff, @str='wlan0eth0vmnet0system.security@{\x00'}, @typed={0x10, 0x4, @str='security\x00'}, @generic="cffd8ae4f5f04efaef460b0696f60c4b32b5e8f016ddaf03574d858e15d6cb47674db9eb305a9d43e70b23fca5673c22b4c9772bf2d211e9a5c7283aff41f00d75464c87c4c027a53f8369b246a33d7f7999ee08b2e2c5df31da76863012a5158b60767f92930373bee87567b44a630015d753f00c1e4addb8e96122ec5b18c5adaae004d2ab3bef10000f4a58c24e2c3042100da05ce15e17a30efc2ad6d90d53ae8c734e916f66672461b97ca7d697fef70ee6877b4fa82a68f03919a3458ac09e7221c91613ee0549b89801bf3b07901f700b72c91a482fc75ca1579976b64ca5adb5705d2f3caf", @typed={0x8, 0x85, @fd=r4}]}]}, 0x1f0}, {&(0x7f0000000180)={0x18, 0x3c, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x18, @u32=0x9}]}, 0x18}, {&(0x7f0000000680)={0x1f8, 0x33, 0x324, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x1e8, 0x23, [@typed={0x8, 0x95, @ipv4=@multicast2}, @typed={0x8, 0x15, @ipv4=@loopback}, @typed={0x8, 0x2e, @u32=0x5}, @generic="7c000c9bc3b4ffe97cc7935c1bd8edb5dc26453a98d3f4e5c2625387b75e52638d0e16dcbb60c48e86b9e6a870a8e86406cfe97554bdf68cc1f960c3acf25fcec6385d40615054b3a85d446e82057ffdc4df1e0d84ad5cb5279c5eba571fcbc0517d586e91d23b88b83b5cb789cb0aa075139e42eff43ce79fb7348fd9f236c113d9c89d667064ffc4e881f414c46efb4f0faeee5a3031ec3e5b52940f399158d95a713dff726ce42f51b34c7e3975691859a3df66d1a65ca3512fba94ede25ab085be8606de5403695488", @generic="28943c584743d7af9f2b771aeaa03bd7161da0514b24d509c3057751564af7252e3dfc008cb50f45634cdd14265232961db331e9671a308ff0b31ede60cac5dc2880251a43f4a7e7b1a450b8ea48269304df87ee10eb02c00ef326b36fc9ce04e51623b4b4566025130a32c4385f425fb19a47ccae1a50ca43279e660fec242271f262c9ac1c29d7b808fe0c5e5a45d5f68b1b0ebcd6f7e5cf49113f", @generic="37239e6c8c6c696ea01d944b06678dfa99d9aafc5771b5e6fdf067bd78c5883d66668452824030c1c72ae1a79a7f80ec22aaf5769eb7d8564b6a4a8f83e61232825b5b6eed497787b80b6da46b59436cef44e83332a2d3a6c372fdf619077c6041a253b8"]}]}, 0x1f8}, {&(0x7f0000000880)={0x23e0, 0x17, 0x12, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x41, @u32=0x8001}, @nested={0x28, 0x1, [@typed={0x4, 0x71}, @generic="84a10419f71f01b1946750bc8467a2857b5369131046738e1162ef", @typed={0x4, 0x93}]}, @generic="7dedb2160c1be55240e68ddfb2ebfe0aafb97cee12563f01de322874eeeef26e6570d028c035cf91687932328ad3b1614954aaeccb92ab65c7196ab69ab1ad826928ca322fa44d32afd836e3fee07ae5ccc673dd8ab1611e3c727b9d342dbcafc3a181157bd33feb0801856b206fd494ac3c86b30091e7ed3e3e32fe42acd9c75bda49c240c3a90122e30f768fb9fbd17591c7e3aa11b52aa8e16f9602b62c807d27deff3cb43f98e983fa76ee146473f829b20a97780e567b295dd31fb88739fedf8591d67523eb3541df29093188488a4205c1beb348310a2757706be2c73f05fd4df6ae84d82949", @typed={0x8, 0x20, @fd=r4}, @generic="094fe85c902f62ad14540e4bdd4593b8eca52f40540d96349e8d331662e9300ca4737dab92e4d46624df496da231349fcca30e51f5140836630c5781cd11", @nested={0x210c, 0x8c, [@generic="4b14b8e0f2451a2e961d4fcdbe6661d8c94ddd3c62688692f137e77e45ac29001d91b6042817700a6095ec8f96f769ccec79391e79df9d454dd77cf63c7e916aa42256fc12d14af9a275559caf", @typed={0x8, 0x55, @pid=r2}, @typed={0x8, 0x19, @u32=0x474e}, @typed={0x8, 0x58, @u32=0x80000000}, @typed={0x8, 0x8, @ipv4=@loopback}, @generic="a6d0b0859790ff7be17d2fa23123113c642a1b300678bfb4cc50ad6b69f9c323c289ada03a3d4ec479485f515d589c5bf8bc316c3f6cb9d1e4b0624a15c78857f042c03947551d152e575ea045496ff9b87268b9ef420d6339c4763284afed1363cbd5c78a64f243354e97eba4c0e65d64c5bacaaedcfd217a01ca1f029b48740241c7d523e2fa4194f32540ad2e", @generic="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", @generic="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", @typed={0xc, 0x3a, @u64=0x3b}]}, @typed={0x8, 0x24, @fd=r3}, @nested={0x154, 0xa, [@typed={0x8, 0x7a, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @generic="06f08e4043d151ad29500b8d0bcdade2b16ffd31873303b594d501b0c7abe9971c3524b480b2401f833193c9221d705d036d098e5e20dd650aecab0ebbd9349b20c902043482f36bd4e84f35433fc6ccbe7aa2d37108272fc5aed32898210a7d8dc0d2c5f5497bc598ff3b653cf143b76fc733bda6b4a3df2313605458cc2f612d8a72af6198de7fb0b8824bee504d8ca8c32b0e358ab86b7a439f7404722945a5e16f02fc26a4d93dbff034a0b2aa07896ea241", @generic="c3a4a2a83c697dabe0d20656237b7e23ad2c0e9d9f8785f1f0336ea3b038", @typed={0xc, 0x31, @u64=0x10001}, @typed={0x8, 0x6a, @u32=0xffffffff}, @generic="bb687c054e86b7b51e18fcf192ca81f2bb7df86f7cada2070c6a251cced024ee4a007a839d50b36e49c7454373fd8121e9aab772baee5890d3a6627876a7ecf24e4e8af2759ecf980e0797dbf9bf47b47aaa267b4cb168bb8ba5151886501501"]}, @typed={0x8, 0x27, @fd=r4}]}, 0x23e0}, {&(0x7f0000002c80)={0x1284, 0x3f, 0x708, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x1084, 0x93, [@typed={0x8, 0xc, @fd=r4}, @typed={0x8, 0x24, @ipv4=@multicast1}, @generic="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", @generic="fcac7a9736a10be3fd1d8edb90d6b7538bd4b417416d01095ca05afb11ea85a536d4042a02393c40837099027b9caa70eace39b2ad4deb7d5643427d370206ff7ffc9101d88e1a8a620a1af5dc86d27470a854950eea815134e3932854f1a374e37a2f47feb8e5fe884aaf508e5a9a"]}, @typed={0x8, 0x4a, @pid=r2}, @typed={0xc, 0x17, @u64=0x8}, @nested={0xd0, 0x45, [@generic="e784b3c9f6c732b8dee913e7d29d2d55331991201194c3b12e9ec342b21ea1f0e5640d26c95ad60f4dfb0187d3921a3e8512e1e189e40b3fa200f43cf37a9229991288d1519be5587135e4d58dea58d23bcb855501d725a81944552b4b39f0544864782b5c4bac2969bde74b6a47766d57eb8300e2b6df998e4adbfbb963a3e78d11864f138298b15325a6cd22f1018d790370b477af0509592dc8ee5b847f0f964565dd0d38c8fcc0389ebd82da59", @generic="eec756e0d41ac7c7a9d0c8f304acac024f0ee608fb580eb4964a363f"]}, @typed={0x3c, 0x32, @binary="dfb70c6744e23f97e7d75cd5538b2a8434812293ea426c05a688ba601da0728033e122233af5dbfe91e8702c81702387be9f40474bf3e933"}, @generic="f9250dcbb1e0e8b4865242744274805c782a178150b4e75260d84fc5a3ba52a6f0fa4dc95994772d295b5ae5578bf42bbc15084192e21c2e6e2870486f2ba085db1d79cc593a1d0e9c85787e9009e83bf65924e92404334edeb5794faf122d9832e0a8860e95e4dd9c0f3c9a466ea6c1d7f0fc26e5872e167be4fdc1ca2726cfc95a910196412546a18554e3ce6b871dbffaeff2233d00901a94974c8580c1fd51e60787fc5bfbd2cfbf6d2feb232f9f43177342410769", @nested={0x18, 0x79, [@typed={0x14, 0x58, @ipv6=@local}]}]}, 0x1284}, {&(0x7f0000003f40)={0x14c, 0x27, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x78, 0x83, @binary="59c1fcac854410d0db18bbe59c29c5b996a920917b2f86118799102bdc9f3d12b099ceb30f9cf2c4d1cf1b64f423049cfeffc3bed2643fb25ff00be71fca17d1c4827019ff37eed27b70604c665b7cd426b7cb15f3dc3a3e375e5964c430619ff7687342b517999025cc9969941c669c43a523"}, @generic="a0180ae93ce62ee22f59a1af2362aff11e232a7ae563d7e539195f1957af8d6ccf12660d7f40fe3e668f8199f7826d0aaae5a5903037034f1a3e5d2e54d97f0cc2a9d12ceb670fcd52f143d2692aba426d12a103c92e8ef26ffba4aa508cf93119a4ad376e13748ab08a9f8d31bae02c1d602d6e326e51ee402524ba288b925091887adb7f43055edf46b68c9ed3bdd8f5dbc911c356818aeafa675d6ea9afd552f6d9d771ca993373fbf86908e920fd86c4a104888ef051d81ccabc0012954e34d99c"]}, 0x14c}, {&(0x7f00000040c0)={0x1350, 0x26, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@generic="80bbec9de2bc8ae33a7467fe1709dc0fe2abee577e7190e24287abeec5852a590e118145c481166d1b849605fc8308665a6bb0d93733", @generic="d0ced97ebd9548a9185636fb6c19771c358e887f20d5dcfab2ebe89cbacb97a1ad90367dfbec9bb3cde187895bed741f71ab0c0a52cebcd4d7695fcb1095dce8d6206f78675489dcb863daba2ab4d7f729bb253589bafb41cb7c01c9a47620f1afe62fb60fc3fa88e84a2d2c5e43127e25b5d5bc22dfd51249782d664b8d5b3a42895b5d40edc4180a6955dacac3cbf1646545187340fff1b3992655ad01e1ff9f3945c5520a7aeeedb628aee1baf21335bf09ebc71091485d1ffa6490b4fbd9ba8bc1", @nested={0x164, 0x80, [@typed={0xf4, 0x2b, @binary="1eab119977d13a0b814379e395f97a4790ee967cbc19331eaea392db555ffd6277ef2bdd2ce539e885b36b1a4855d860c3bbc64a7798f9014ac9ff4640e7d9b6ab67c41a79a29d56e8ee9ed301a37b5b5a1413590c4fadcd1c6b8f0920d2ec94947dc080674a1ca6c28ab7c595df4fcdf2e7c7bd134f8dad3fef7d98fa831e6a8578b4569ec7b19f63ce3610816bb3a158cc624e4abdff070b05a28ba7689dc1baa8a0191982317b79826fac7a8e54c9e489a63e34e03c349d7f9e0dabb415a0aeff661bd497e4cc3abf6f9cb5f23e498ce4ad2922ad9adf5e8c808dd1f425f1706aa75c1f24799d21df16ce5e4a"}, @generic="990b23dd6200c36ffab165595f7e55d160f1b9522255bb2cb56c027a594201411585e80a416a6d7f7d3ce2ec7e1977cd558f9b044b0a85f6cb6d4fdc68f44c97518c58819bd5588fbfd18cadf75616cba9f7e19ba0218a4d94", @typed={0x8, 0x2c, @uid=r6}, @typed={0x8, 0x75, @fd=r0}]}, @generic="8e41c62ccc3213dd0f4ecb916358344d5278974a8386e903c04c717940b3b22f900a8c9933cb177f03c499018b897e537f4d37e778cb9fadb232c124638a5c6d7581a0a2de1eef98f31ab984e12285b960109d00f0d2118656bf7c241b69298ab8c9f68ec299a431e92bc2ea7cf845ceb0292aeb521100503c66bc8804e9ecf953f28a4b82bdafa004cca31a6d7b116be3845143ad8d1eaa3c3bc1b6a06b1aea6b5a0f2cec19871e1ad24792cc830033c81e0e5fef6c4e7e1d7628b1d123f2bc4245c3b32cc4770a012d59c83005dddfaeab53e62b895369795d4d2ad4db3e7238c2b5cce2dc90f1a12d7a18d91460fdc69a81f166e06bb307f7ff4c603d4601b97c1be4a870e0423a499af648cf06197fba27ff1452e57ef757a3a3f22613fa97ca10904ccd4fe94a01334b2fec1b774a09ad2af01cb9b6530468145de69e91ac8c9de4b594372fb7d304aeb9f7071ceedcccbd49a0a9a75d88fa0852d40a4d7673602bae30c18e1e50439a8ea1e2dee05690a82d2667db426a96758cd4c5a71dfae72af35e16a2dbe3cf594abe918c126c75bbc7fc3f1e4c7e5af7e35204b8aa17648d784b0dbdb7e8efd6564e6a800640f2f3f927d8f7bacfc585dc5968ae5deacca93e4df8ce0cef6a4da3418e9919626a3c504ea48ed85f78f504899fe9028b0e54a99b8405cfd2bdcb7fa63c2f2c8ae40b880f92fdf41b86bd191b29e5e6d0dbec5fe65ea795f47619c32d92d69cbec7256a9f3b4e9216b28e43df2092720155fc58a311b70aa54ef9b9bdcf0adb336a321b9962ccd037ec2aff1b193e2702640c522a3f1cbc251d166cc8235e935d165f2265f32a6ab0b95cc4a79a955eb40898ef5c7eb8f5291a5d6086215dc50ebee3b1973382db90c9844e41d172e86df0c47345a56aa0db6b22ff0a2845f454e25ff6930bc9d49d0832e3a62c070db30f53dab694323906033c1a690b64c94818546089d1637d330d0b4080d9224afcceb48d9e58c1227cba417e212818d788d61eba3f9d3434c8776f378f3ae28ca3aeedfa00eea85a7c79e57115f5826d54cfbbe2c745c14090895d379990a8893bb7d124102dacd03bae53401a4ff204f430cb59ad647b1dbea5473cb6ead51c5f72f4eae2a93d7bebdee29420bfcf3dc6e78186ab0d8b1558cf23d4f73007cc91004d0fab8b03f94a50c63e6019dfd8a9f4cbedbede4613bc727d53b3c9dddbae41becf03a82d7404a7012ccbc1195085b41dead5db751098cc0c837381b927d69e0bb101817e830edbf8706ab81c7c9698e1e02dfbf96f09efc8089d9cd4d2923998f42dc2c39cd94bc12aebc31be4d97058f3835ef2bb330e551024b682d82a73c6842218f0b3c0ce9bad225eb979dba4fcdaf4799b2cb9f2461644c84513bfb2c97cd1e179180322c12dc91c4d4e015f76e9391e3b27b5745d3776ce9f99d2e14807ef85fda93067dfaba21a96e87b2fb0f8fd07e87b95c18aada9c8acddd09e6f19517c716a880b4988cb4f0338869cc2428e70829cf4e1e36b330ac25a4b1a911c0ab0dc5ed2244ec911275c91b19c895da1a97f1e80076ae16845ffb0b49553b14b66743a8ad536abe68a659ba3d3ac5d0b513a432693eae14c5d341ba5820cc1fc8ce61b5f9186c9537e5dec9208b9a513ce51b66f39db148aa8e01ee1a2eb0b2049b81f8d1f5c902cfb2f31e8f15bfde7582c7355361069c48022cfed7260b5713c531bd5916fdc32827b90970d255eb8a4f3807d451ddd7e954727699f1842805f197697dbf1513e8abd99f61ea95c889ab617203606685ad029015e54392d7e6c58412af28fc642db98e7b22741d1d9520231b63ba76084c56493b730bc4e51bf2a6435d740acd5c1a034b4ef58aeb786b139e2f743d9c3addca7e77496c33136cbfe15d953f960b578162a07fc5962cbf16de72f5be859bab0984882c1998b4d79bbcdd34785305b4af4e07fee0116c68432e0d112ec95bba6c50d97bd8e0748cd252209270ba01b9bfa032608b8ce87a13eea82667efa5a4aeeecdf17653017c89b0735783c2d69808913ad8fa9e9665d74910b72105909d7dd73a7c15ea514cd301a5762db2bded0a7840a5c3590e74debe8e214e35eeba9512fa2bf27e03727025c76b587959a11ddc04a80453d79cf226660e38eed125c4fd28e12d71e4b379062e161f12c75b50372b648bd8b71278c508002b47cc5b4c25b78ac64eac906c30052e8cabe3e3e3f37b40ab1c7ecebe3567ced84741ad45fe77d6c2a90309eb55ca3250cf510fcdd065d5dd0e26c5e81737210c9c7004f4af7720febde5f7521d4c7dbfd02f0a22cc8f97abfa073c90e7c5780f14edd391b925098407d88310c3d295add3c99f32d62d0d94cff89e4c10706745a156276e61594431368abe57462394b78a556ecfc8b753cb80eb03549a37217e0812c1a351e665edb0f5da1e749c8b6589abfa57ab12005ccb0e058f4c30538af395ffa762a91cb59c17602ac7d6eab6861bbd73b5ae847d2f531ee963b388a402f76b9f280ab56a08ef6995c41c3f00f891d4445412e8bfa2f4bbf8dc6734b26714e45a275d26cb9f9de8dfd1dbf5c3536f8554bd080d76408de4a84081d2f675f0566a8df50f68b10e16383be47ce2b0f32b4ca7e90daf5c44647bfeb620c80dd1f115a323f8adc3c3aae8874023853a55fe701723944e83ee0912b5d7c275fc267835a5d8548cc7ecad8ffe6bc0456b2ee12ed0aebfe4fc72ec1130481021d8b1841dba1f8930b82cb88fa9b5affd5108e78a0ee11eda5df5918cda3be21a53256ef357e4d0fc806876b031cebf7483ccc21fab40d6875a2938f82b85bb44c144084b2116fae0c157e057bfdeb10d9cbd45afd9d324999e063b4ec2ee4eda5c2acaac41b714e78e9becdf5cbb374b7a9b0ffcc9f10544007ec6a2a67b4d34a1960fbb8ec028d310efd7bd9e5294e760542f6c9acd208fca146ca75df32a3bb20df4984ee8fa7b79c2fe0a7fabea4c50271e226f35f953404df04cae3a2d6bc3e6c8287599167f940fcd6aaa04d5438f5922283117afc154e64c6fe0977b6b5185922437a1e9d2eb245a3917d4646e59e01a6bb0e673610b86aad2f7bd3417870874ef96a77158e8066e31eb72a8df82e87f64738ffc97677e14dfb6dab24c6d65fd97012fdfdcc05547bed947ebb2495d582b72ff90caf3bcf96e85a9ddc452575e7b34b4d4ee5fdd3a0cdac1339f0e5086ee683ebbbae96fa400c817146263b41bb6f92e046b145c6d817267a5c92fcafa8363a582a5c291f077067e394f6e4c3e61e33feeb649ea9d3b3f21e0d6e09bedbadd8f1cf3d1166f13fdf1dd888d5ffb8205a772bca72a3f348e48b9a0476f81ba36d36619de98ac61ce084fed43bbc6462d14900242a9d3c468dd3b160d983b1c3b6e58b9744008a9d1eeb73c5873b3498567d33f6f4db61e4be66acecad6ea5f2c35283a50cfcc9acafadaea6ea04a9860b05f346f11ced6c774aff51ab2552cd89456cdad5c825cf80c4aa6a1740e22887c2dc05b0256ac1fea6ffc926be614baa56e53cac9780d86abcde7e8b192fdf3d77c58b7a13ce7ca55ef38e343762f29f499d1514bfe7a54eae31c40927e30fdf17f63e7a1ff4db67804756b5b4e2a9818086260b5e937bd5471f8ee8ece52683492031e49522235b5f2bd0c205be9b2b9b748df82d2b8c0fa76a22ae8e70ed1c87fee4bc17e2ee2bf0f7a45c30fd5553a3110c2d2790212cd1315db121bc3715bcaf4b5bb67f91cf543ca8853a890373268a081094c8a3fa611ecbc1d53b9dc543169a94c0da6fc66d6278087d04e06a5e7ad43dbe5141166121cccbf7f294816b091fd5eda4c36a5472b017cd2b9de6a139f726f5e6d10e4d063dbd2dadab5ff13eadd7ab73c61cd4fda0fc3ac4f3a284d82a6977247338b45b17234801db69478597815029fe1fb0a27d8032d43e4773877ef628434a50e7d764158331cd69b4d81e7cf8dd9ed0dca75f4cff6e1c0fa88d6e1fc71b61868b471eb58e24f4a77f4c8c7b874b28fa916cb4636ba4141f90f95c007b7e7dc137a45046aab909e87a81726198fbd79f4898502a1d75f4d8d83695defc246360711632e6189f9036995556d2053eb69c88642d0d5958f78f4019d86b6227e775644b216c6b58bc025e8a28b2e448bbc108cf27899c82148f948128008500b98d9ff53878c09e5f589628ec78300636ccb06698c4e79b60cae308f3aa9b0984486929ad6d7b30fce7e6c66395623c73a5c0ade0c06ff16390ea8883ad614991b2909a84db31d21a71d67acc05cb5be3d9e5a00985c93bc42deced91944afcd8abcd578d8229b8e0443aba799ae494ba944f39838a6851ba12d58fade6a1c75e637a47bf9f2e27f5deebae3e948989190786546edc16d9ce4b8dbbf923fb60b5e5d910f7cd934be18ce51b7370cff823dcb5c6d988a89c5853868f9532483e4a86d00da1770e2c540bcf17b0b5d3d78be3a8c7cbe6c8c12110bcc061b4668114febb164d1af280db40b071fd6d8d868246a0350e262a06845877ec8256dd7057632c2a7eb6fa899f9b8e793d40e3732ba9844351687516f1026aa2561409523208fe0e17b9811eb11d792f64a92a2dd9d98411afe8f67fa32271efd7f85e0637d5c38b6eb5fc0cb7a6a7841d4387d110fe1409a202e0123d79ebabb88b570d7244fab16c00785dbc30370cc37e380e672d1e7d6f5aadc79e827d32e06f80b5a2089b8cf6b13713b0ac518366595a67e433601b43f96421c979b71518b5b9fdc2cd639d78b7ddf24316d0253d4a4cfa7f668756902aa2d193541363129bb31a480bb41adc5db976050c2ca40c8d10e70e262d3059a0e62a3cfd993d3678d0355e162bc67d5a0bbd69a05d483be8008f7ca56a6f7ab8be07a06c3a0c7278eb0b48baebf07bb8df34effedae94d1b51b510a0fb7c549b2bee6277d123583a6446d49dc0b72a6908054c8b58c0755c52bfeebb6c2b1b711178aef136529ac6d011a23d25a57d1a41b38202ad99a1bb401ac73fa4eb140a37109c4b27cf85a244405eaff34c8163a03f6bd3a1d823e9928dd923aa9276539bd928a0382bb65e88bc56d056cbeaeb8ba9ae8548e1c842abf45a62b57b4d65a29aa39b34d430c7a3eb1a74cde5f775cc7e929ff4831be4119cd6a76e6c2241f2a2202f0462b9884725a54cbd14d8bae28315cd0e8dfdf6306daf974437a444ae7488db9cda8bad556e4a896eedd087c8db0927abd7d2c001e93de46b99a29433d909f65c576c3748b67455b5623d0d049f938588ad7c42710fe7fd80c57924553888768e701c965a9c3be1ad9df463c880fa318e82d92b12f02a7c658c9ef22b2916094bba75dcde67bea9d1b9450df2edb95e6333bf284d5358427333cca821c50bf9ef2fef7f2c987df46a22a10e94d6ab2ac56510691670eae3f345b5f6799242d575f8ec2c3cc495d731c24cf7724df6a1cf9cd5e08c6196dbe105b4e16a2fcc1f7520da2749e2c91eee2430497259414b205218b899b3e92e7d70e7d78709f77e4bad0f72f183e0d059da6d9b9eafd2583bc7e1f296ae52c3ca2d6e858181059300effc7eabd2754a243be8db575f20d95e0234e5153aa1aba4b1e634a99255c03dc48d8bbdc4b7a082e3507f8776f0da1b99a1b931c81cfcac458ce0de97f3a6e89a492f5cb91a9c175c22329a5a45b41b9afd2c7d68c36911063dda8d047e946fc5faa96170065642e2e6a9b095ca745287a3756b5a0c29194b720414935af36ad6acab33950d4333eeecacdd11", @generic="3c4b41343d387871bfbecdfdf64e7d4e1da074afea0daa9a1dafbdfcc61e9a96eb543fec2b8001034c345d70203e2cf36963a5f12e9ebb815f20f594ec3179b816db1a4110226e09032f68590fa5691ba6f45cf9f763dd7bffd48816f2dc99566e97a100caa68b63cf2e0974c64f0a83f22669afec7fa98fb518fa2f2f074e75c932a87306352bc572a18a76fbfa55ae8fcad7d12fae6f909b27b3b33c314a4459a89e27946b250da5244221a7a6f43cd521e8ded714da1085006f63f4650234e690799d0b515fd3bca0d1a72335e18ea648539ac8f13157e18e06b6962c2a6b4286fb"]}, 0x1350}, {&(0x7f0000000200)={0x24, 0x37, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x14, 0x7, @ipv6=@remote}]}, 0x24}, {&(0x7f0000005680)={0x4d8, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x24, 0x3, [@typed={0x8, 0x1b, @uid=r7}, @generic="b3be058c90ab11c3", @typed={0x8, 0x1b, @fd=r0}, @typed={0x8, 0x28, @fd=r0}]}, @nested={0x2e4, 0x63, [@generic="45c860af44968229fb4e7c6e4ff07b8b3c24244ff6bb14e4b7461aa7c647638abb5e2cdf7873afbcaaba7df853cb99210864c5007a40c3f1f300e2bb1ec8b797319bde077f0b81f0698865f231643b4c1356769bbc97f830c7fc94e3c38c5e8d3c7396e33d1638980c566aeef8cd43bf4b3fd7553f64fe907393a7c06d78efb448dc5d081838370e974e027cea1775d7d5b7aaea2bdfad9b2a1aa3ee542b510ea0da2fec5440af8acc8c97a2f9d1ab226b30a9551de2c070b18723f1f881338db3d3ee9d2e4d6fbaa61d", @typed={0x8, 0x14, @u32}, @typed={0x8, 0x57, @uid=r8}, @generic="d2edf21439f35e3de68188fee697a624820d38c095985c880bfec4e1690149c0cf392a6f5a7407924a6a318cadab2e277e5e1523892061c19c23405aed98d92bb30089a1994410eb8ff4cc64c893c8942e84b58a41fe84d4e18777a416db2b941f793ab1f7b7fd2e24dad742813f1be83c470ef3", @generic="23ae9a5e8d3cab04310af0c975ca569bc39697f5d82b704c7d798286a63767d07de15557c7c822ede208879c2c749983e80d63b48128358b668afd86d1d10ba94a36a7c519ffd131117b5af645b7f6f7d928f5644978dd1f8ecd37667afcd853e2afe4ad143e755f46f6a5f117d388bed0922b19e1d8949651141cde4bdcd2dcc8309ac63a64d04edc6dd5c607e26a82b0d22005995c4dc4ae84aed405e5a3496905192832d33752f07fa9", @generic="37f8101abbf80e527bef96c812f4ca557b1db028521df0913a3bda38429e1a5df4ef8cd0a7f0243544bc0921021ce269ebd65387625a61079fe2775ccfda21", @generic="dca69352bd6c778a6f2aa2a2350074254d1f9f651467a58e12a4502bc53a45c5716a112519eb698b7ca4b9ad742f474fee8f2fb9fd3df071c7be3d7479a71923ee4699ed8962a72a6ced8a7805b4d98bb44d49afc8d89ed048fe832d4ece66ef6cd79434018d95b46f28b3f2039c21e4f0a76cb5af8850325ff2ccc7da0da498c05a9f98f5f19b7d777f2eb38866d505a9e70802ef98837fc231c2b808657fc031f381a86715"]}, @nested={0x20, 0xfffffffffffffffb, [@typed={0x8, 0x8b, @ipv4=@local}, @typed={0xc, 0x23, @u64=0x20}, @typed={0x8, 0x3b, @uid=r9}]}, @generic="2808868a5348fc2b9d", @typed={0xfc, 0x31, @binary="141655d6c729bcd50f6140f8adc46484948f6fb94fe7b1db6b74bbbeb5375aa85512fdaa07076fb7512c13bf95cc0d70b974b4e69b066195ab6c13b2c4953f7d2e5b46b84032dee35b9481910585a04b73c7b5782bee0475be3d03648d3b49e5273b70bdb208b08e258b3107f3870d8f0c77586c79899d07352271ad91c7be60f128bc5a37e57b889c44e020d5cdace27872fe41dd227916b2666118de7d86ff1b5a2721eabe120c9c892b2424e90ac0b8938a140fc9f7d8b99ba83846a538fc136217898b533471e5c6bc4dea947018f7bf1b5ee0ea4425974de5506609cb262f0637873ef9433089c0da94324990e86ff943472ee7"}, @typed={0x4, 0x40}, @generic="1f954e7f3229fa1776593e3dcb1afcf91f312fd6fd4234784b9e430eddf6cfa7b15f026dd379c737ae4c006c9d206779c8b730c2d541bd4dfb6f05500fd4d1a9d528d70985cfa2586eceb6419911c5328e94ba413ebc9b21737ce16f2694ba141e089498c77baa7aeefc66ec885d3be4e3ff284ff43af2d796062b5dbad1b19e32ebf4ae2c4e0eda380e6c780d655804a92674ab4199"]}, 0x4d8}], 0xa, &(0x7f0000006080)=[@rights={{0x24, 0x1, 0x1, [r3, r4, r3, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r2, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r2, r16, r17}}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r4]}}], 0xa8, 0xc800}, 0x40) dup2(r4, r3) tkill(r2, 0x1000000000000014) 17:26:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1909.546677][T30402] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x3c, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x4000]}) 17:26:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7], [], @empty}}]}, 0x28}}, 0x0) 17:26:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) close(r4) 17:26:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x300, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1909.840577][T30422] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x58, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0xff00]}) 17:26:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x8], [], @empty}}]}, 0x28}}, 0x0) 17:26:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x500, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) close(r4) [ 1910.102428][T30439] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1910.174265][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1910.180176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1910.334321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1910.334338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1910.340130][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1910.345985][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1910.351760][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1910.363175][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x1000000]}) 17:26:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0xffffff89, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xa], [], @empty}}]}, 0x28}}, 0x0) 17:26:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x600, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB="0400000000000000070000000000000009000000000000000200000000000000040000000000000009030901000000000000000000000000000000000000000000000000000000000000000000000000b074000000000000060000000000000020000000000000003620ff03000000000000000000000000000000000000000000000000000000000000000000000000060000000000000009000000000000001f0000000000000000001d08000000000000000000000000000000000000000000000000000000000000000000000000050000000000000061050000000000000400000000000000080100ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000800000000003a00203000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000002000000000000000ff74010700000000000000000000000000000000000000000000000000000000000000000000000008000000000000000700000000000000080000000000000000047f05000000000000000000000000000000000000000000000000000000000000070000000000"]) tkill(r1, 0x1000000000000014) 17:26:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) close(r4) 17:26:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x900, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1912.725765][T30457] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x2000000]}) 17:26:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x2, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe], [], @empty}}]}, 0x28}}, 0x0) 17:26:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() r2 = inotify_init1(0x80000) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = dup2(r3, r2) timer_create(0x7, &(0x7f0000000400)={0x0, 0x20, 0x0, @thr={&(0x7f0000000380)="638b6188554eed51aa4c3f706b2500297cbbf840c12c5a3ec0cce34354f00aa96d66f112149426e3f997ba6bc74224ca7703aea1a4e2751d59329b0f8ddc5c34d7f867773ef6c9b91479ac2929666168a6d36232267d038a39450d6af0268fc819540df8774307e7a16762d30a5ced", &(0x7f0000000480)="66c78f5c0efde1b971d5c0d4686c7598fcb040a2250fe42308e09e4e8d7a95e622aee9ae2296306e033ac4b80b419855c2d2b09ca9308cf13e5d394907679d541a1631c4bc1b19de2efe63e711e44b6c2b66d09cff828f904fbd796d7bed98f3b77e2f5276656237de0edc791f1d200fc14b7fbef12f4b3a60d3f51c62354cc371170f93144949ee8ea9056804ce5ec1d096031d96b7339f8f84f5f2d69cb4c6d8089fafee5cad32fe91"}}, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x40, 0x1000, 0x1}, &(0x7f0000000140)=0x10) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000300)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x1f}}, 0x7ff, 0x9, 0x4, 0x2}, &(0x7f0000000280)=0x98) ioctl$TIOCNOTTY(r4, 0x5422) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) 17:26:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r4) [ 1912.962520][T30471] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xa00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x3, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x3000000]}) 17:26:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf], [], @empty}}]}, 0x28}}, 0x0) 17:26:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xb00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) close(r4) 17:26:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x4000000]}) [ 1913.292628][T30497] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x10], [], @empty}}]}, 0x28}}, 0x0) 17:26:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf00, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1913.469002][T30509] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1914.494299][ C1] net_ratelimit: 14 callbacks suppressed [ 1914.494364][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1914.499991][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1914.500047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1914.517552][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1914.523358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1915.694287][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1915.700146][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x8000012, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x0, 0x9, 0x9, 0xb81}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @mcast2, 0x100000001}, 0x1c) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) gettid() r4 = eventfd2(0x1, 0x80804) dup2(r4, r3) tkill(r2, 0x25) 17:26:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x6, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x48], [], @empty}}]}, 0x28}}, 0x0) 17:26:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x5000000]}) 17:26:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1100, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) close(r4) [ 1916.136161][T30524] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x7, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1200, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x6000000]}) [ 1916.206706][T30530] QAT: Invalid ioctl 17:26:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4c], [], @empty}}]}, 0x28}}, 0x0) 17:26:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) close(r4) 17:26:46 executing program 5: uname(&(0x7f0000000100)=""/119) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x3ff, 0x800) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000280)={{0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2}, 0xfffffffffffffff8, 0x3ff, 'id1\x00', 'timer1\x00', 0x0, 0x7fff, 0x800, 0x6, 0x1}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") write$binfmt_elf32(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/2112], 0x840) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() r3 = inotify_init1(0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r4 = eventfd2(0x7, 0x0) gettid() prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r5 = dup2(r4, r3) tkill(r2, 0x1000000000000014) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x6c, 0x852, 0x5, 0x0, 0x0, 0x8, 0x0, 0x3, 0x1477, 0x3, 0x100000000, 0xfffffffffffff0a2, 0x5, 0x1, 0x0, 0x4cd, 0x6, 0x6, 0x7fffffff, 0x7fff, 0x100000001, 0x8, 0x401, 0xffffffffffffffe1, 0x99b, 0x9, 0x9, 0x8, 0x8000, 0x80, 0xb2, 0xea4, 0x3, 0x4, 0x2d2de26c, 0x1ff, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x11004, 0x10000, 0x9, 0xf, 0x1, 0x100000000}, 0xffffffffffffffff, 0x0, r3, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000400)=0x1f, 0x4) [ 1916.351748][T30542] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1916.414272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1916.420091][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:26:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x7000000]}) 17:26:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x60], [], @empty}}]}, 0x28}}, 0x0) 17:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1300, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1916.574269][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:26:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x8000000]}) 17:26:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x8) dup2(r3, r2) tkill(r1, 0x1000000000000014) 17:26:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xd, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) close(r4) [ 1916.744993][T30565] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1400, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x68], [], @empty}}]}, 0x28}}, 0x0) 17:26:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x20000000]}) 17:26:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x28, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x2963, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) close(r4) 17:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1917.050111][T30591] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x40000000]}) 17:26:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6c], [], @empty}}]}, 0x28}}, 0x0) [ 1917.370550][T30608] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() r2 = inotify_init1(0x800) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/189, 0xbd}], 0x1) r3 = eventfd2(0x7, 0x0) dup2(r3, r2) tkill(r1, 0x13) 17:26:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x58, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6329, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) close(r4) 17:26:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0xfecaedfe]}) 17:26:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x74], [], @empty}}]}, 0x28}}, 0x0) [ 1917.702936][T30625] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xf0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7a], [], @empty}}]}, 0x28}}, 0x0) 17:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0xfeedcafe]}) 17:26:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) close(r4) 17:26:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x300, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:47 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r2 = dup(r1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000240)="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") socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 17:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x30000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1917.995546][T30644] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0xff000000]}) 17:26:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf0], [], @empty}}]}, 0x28}}, 0x0) 17:26:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x543, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) close(r4) 17:26:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x34000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1918.260177][T30664] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x100000000000000]}) 17:26:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x300], [], @empty}}]}, 0x28}}, 0x0) 17:26:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x600, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x200000000000000]}) 17:26:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) close(r4) [ 1918.582800][T30681] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:49 executing program 5: poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x187bd3a3, 0x0, 0x0, 0x800e0060e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000000)=[{r1, 0x40}], 0x1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x101) shutdown(r0, 0x0) 17:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x400300, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x500], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x608, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x300000000000000]}) 17:26:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) close(r4) [ 1919.312176][T30704] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf0ffff, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x400000000000000]}) 17:26:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x689, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x600], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x700, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) close(r4) 17:26:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x0, 0x0, 0xff}}) 17:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x700], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x500000000000000]}) 17:26:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x806, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1919.854273][ C1] net_ratelimit: 13 callbacks suppressed [ 1919.854281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1919.865882][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x600000000000000]}) 17:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x9ce], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xd00, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x2000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) 17:26:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) shmget(0x1, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) recvfrom$inet(r1, 0x0, 0xed67, 0x2, 0x0, 0x800e005f1) shutdown(r0, 0x0) 17:26:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xe80, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xa00], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x700000000000000]}) 17:26:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x3000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:26:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) 17:26:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe00], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x2800, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x800000000000000]}) [ 1920.574306][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.580152][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:26:50 executing program 5: poll(&(0x7f0000000000)=[{}], 0x1, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xff5b, 0x0, 0x0, 0x800e004c7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}, {0x0}], 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e004cd) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:26:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x5000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) 17:26:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf00], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x3580, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1920.734267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.734297][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.740174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1920.746000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1920.751791][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.763193][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x2000000000000000]}) 17:26:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf26], [], @empty}}]}, 0x28}}, 0x0) 17:26:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:26:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x4000000000000000]}) 17:26:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4305, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1921.177306][T30820] validate_nla: 6 callbacks suppressed [ 1921.177317][T30820] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:51 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000), 0x1c) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], [], @local}}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) 17:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x8000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0xfecaedfe00000000]}) 17:26:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x1f00], [], @empty}}]}, 0x28}}, 0x0) 17:26:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) 17:26:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4788, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x9000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1921.529556][T30843] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0xff00000000000000]}) 17:26:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x2000], [], @empty}}]}, 0x28}}, 0x0) 17:26:51 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0x350, &(0x7f00000000c0)='\x99\x00', 0xffffffffffffffff}, 0x30) add_key(&(0x7f00000002c0)='trusted\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800), 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@local}}, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, &(0x7f0000000740)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) msgget$private(0x0, 0x200) msgget(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81805) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2001, 0x0) 17:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xa000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4888, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1921.800432][T30862] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x2]}) 17:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xb000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) 17:26:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x260f], [], @empty}}]}, 0x28}}, 0x0) 17:26:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x5800, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x3]}) [ 1922.157820][T30883] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x3f00], [], @empty}}]}, 0x28}}, 0x0) 17:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x10000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1922.399061][T30893] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) 17:26:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x6488, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x4]}) 17:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x11000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4000], [], @empty}}]}, 0x28}}, 0x0) 17:26:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) [ 1922.782042][T30908] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x12000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x5]}) 17:26:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x800e, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4800], [], @empty}}]}, 0x28}}, 0x0) 17:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x13000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:52 executing program 5: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/128, 0x80}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x4) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00881) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:26:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) 17:26:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8035, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1923.086369][T30929] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4c00], [], @empty}}]}, 0x28}}, 0x0) 17:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x14000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x6]}) [ 1923.282225][T30943] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'team_slave_1\x00', 0x400}) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') 17:26:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8100, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x40000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x7]}) 17:26:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6000], [], @empty}}]}, 0x28}}, 0x0) 17:26:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) 17:26:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8847, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1923.595064][T30959] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x8]}) 17:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x63290000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6087], [], @empty}}]}, 0x28}}, 0x0) 17:26:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8848, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:53 executing program 5: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bridge0\x00\x00\x01\x00\x00\x00\x00\xff\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) 17:26:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x300]}) 17:26:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) 17:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x9effffff, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1924.012157][T30982] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1924.037592][T30983] bridge0: port 3(gretap0) entered disabled state [ 1924.044295][T30983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.051543][T30983] bridge0: port 1(bridge_slave_0) entered disabled state 17:26:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8864, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6800], [], @empty}}]}, 0x28}}, 0x0) 17:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf0ffffff, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x500]}) 17:26:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8906, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6c00], [], @empty}}]}, 0x28}}, 0x0) 17:26:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) 17:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xfffff000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1924.617467][T30995] bridge0: port 3(gretap0) entered blocking state [ 1924.624016][T30995] bridge0: port 3(gretap0) entered forwarding state [ 1924.630947][T30995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.638282][T30995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.645731][T30995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.652883][T30995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.732238][T30995] device bridge0 entered promiscuous mode [ 1924.758539][T30983] bridge0: port 3(gretap0) entered disabled state [ 1924.765187][T30983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.772413][T30983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.780992][T30983] device bridge0 left promiscuous mode [ 1924.885443][T30995] bridge0: port 3(gretap0) entered blocking state [ 1924.891997][T30995] bridge0: port 3(gretap0) entered forwarding state [ 1924.894304][ C0] net_ratelimit: 12 callbacks suppressed [ 1924.894312][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1924.898848][T30995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.904356][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1924.910033][T30995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.930197][T30995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.937372][T30995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.944867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1924.950655][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1924.956648][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1924.962425][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:54 executing program 5: poll(&(0x7f0000000080)=[{}, {}], 0x2, 0x49) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x7e, 0x0, 0x0, 0x800e004a1) poll(0x0, 0x0, 0x4b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x896, 0x0, 0x0, 0x800e0049e) readv(r0, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/134, 0x86}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r1, 0x0) shutdown(r0, 0x0) 17:26:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x600]}) 17:26:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xf000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xffffff7f, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7400], [], @empty}}]}, 0x28}}, 0x0) [ 1925.031303][T30995] device bridge0 entered promiscuous mode 17:26:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) 17:26:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x700]}) 17:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xffffff9e, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7a00], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xf0ffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:26:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x2000]}) 17:26:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 17:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xfffffff0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x1000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xce09], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x4000]}) 17:26:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x3000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf000], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x2000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0xff00]}) 17:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x40030000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e1], [], @empty}}]}, 0x28}}, 0x0) 17:26:55 executing program 5: setresuid(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x43732e5398416f1a}) 17:26:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x1000000]}) 17:26:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x3000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf0ffffffffffff, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1926.094311][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1926.100151][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:26:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e2], [], @empty}}]}, 0x28}}, 0x0) 17:26:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) 17:26:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x2000000]}) 17:26:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x100000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1926.280915][T31107] validate_nla: 7 callbacks suppressed [ 1926.280925][T31107] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e3], [], @empty}}]}, 0x28}}, 0x0) 17:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x200000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) 17:26:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x6000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x3000000]}) [ 1926.620039][T31127] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x300000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e4], [], @empty}}]}, 0x28}}, 0x0) 17:26:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x4000000]}) 17:26:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x7000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1926.814293][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1926.820184][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1926.868686][T31144] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) 17:26:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x400000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x5000000]}) 17:26:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e5], [], @empty}}]}, 0x28}}, 0x0) 17:26:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x500000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1927.213341][T31171] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8060000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e6], [], @empty}}]}, 0x28}}, 0x0) 17:26:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x6000000]}) 17:26:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) 17:26:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1927.429599][T31183] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xd000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x7000000]}) 17:26:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x600000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e7], [], @empty}}]}, 0x28}}, 0x0) 17:26:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) 17:26:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x800000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x28000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1927.821770][T31204] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x8000000]}) 17:26:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e8], [], @empty}}]}, 0x28}}, 0x0) 17:26:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x40000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x900000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x43050000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) [ 1928.113397][T31222] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x20000000]}) 17:26:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xa00000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166e9], [], @empty}}]}, 0x28}}, 0x0) 17:26:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x58000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) 17:26:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xb00000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1928.435369][T31244] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x800e0000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x40000000]}) 17:26:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166ea], [], @empty}}]}, 0x28}}, 0x0) 17:26:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf00000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x80350000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) [ 1928.793403][T31266] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0xfecaedfe]}) 17:26:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1000000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166eb], [], @empty}}]}, 0x28}}, 0x0) 17:26:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x81000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:26:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0xfeedcafe]}) 17:26:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1100000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1929.132272][T31286] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:26:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x86ddffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1200000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x166ec], [], @empty}}]}, 0x28}}, 0x0) 17:26:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x88470000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) close(r4) 17:26:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0xff000000]}) 17:26:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1300000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x30000], [], @empty}}]}, 0x28}}, 0x0) 17:26:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x88480000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x100000000000000]}) 17:26:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x1400000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:26:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) close(r4) 17:26:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x88640000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:26:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:26:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x34000], [], @empty}}]}, 0x28}}, 0x0) 17:26:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x200000000000000]}) 17:26:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x4000000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x88a8ffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x400300], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x300000000000000]}) 17:27:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) close(r4) [ 1930.254280][ C1] net_ratelimit: 14 callbacks suppressed [ 1930.254289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.265821][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x6329000000000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf0ffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x88caffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x9effffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x400000000000000]}) 17:27:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x1000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x89060000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) close(r4) 17:27:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x500000000000000]}) 17:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xf0ffffff00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x600000000000000]}) 17:27:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x2000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xffffff7f00000000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1930.974266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.980181][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8dffffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1931.134278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1931.134338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1931.140135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1931.145861][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1931.151714][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1931.163129][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x700000000000000]}) 17:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0xfffffffffffff000, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xf5ffffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) close(r4) 17:27:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2803) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x3000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x800000000000000]}) 17:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000002, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1931.452912][T31431] validate_nla: 7 callbacks suppressed [ 1931.452924][T31431] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x2000000000000000]}) 17:27:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xffffa888, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2803) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r4) 17:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000003, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1931.770860][T31450] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xffffca88, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2803) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x4000000000000000]}) 17:27:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x5000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000002}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) close(r4) 17:27:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xffffdd86, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1932.115598][T31469] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0xfecaedfe00000000]}) 17:27:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xfffff000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000003}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) close(r4) [ 1932.440134][T31484] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0xff00000000000000]}) 17:27:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xffffff8d, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000004}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x2]}) 17:27:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) close(r4) 17:27:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xfffffff5, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1932.791867][T31509] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000005}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:02 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) fcntl$setstatus(r0, 0x4, 0x2803) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 17:27:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x8000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xf0ffffffffffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x3]}) 17:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000006}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) close(r4) [ 1933.126553][T31522] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:03 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) fcntl$setstatus(r0, 0x4, 0x2803) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 17:27:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x100000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x4]}) 17:27:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xa000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000008}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:03 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) fcntl$setstatus(r0, 0x4, 0x2803) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 17:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) close(r4) [ 1933.470487][T31548] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x200000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x5]}) 17:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000009}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000000000000a}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1933.789915][T31573] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x300000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x6]}) 17:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) close(r4) 17:27:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x7]}) 17:27:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x400000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000000000000b}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1934.111561][T31590] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) close(r4) 17:27:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x10000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x600000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x8]}) 17:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000000000000f}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1934.416777][T31608] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x1f000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x700000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000010}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) close(r4) 17:27:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x300]}) 17:27:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x20000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x800000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000011}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x500]}) 17:27:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) close(r4) 17:27:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x806000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x260f0000], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000012}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xd00000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x600]}) [ 1935.294280][ C1] net_ratelimit: 14 callbacks suppressed [ 1935.294289][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.294307][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.300099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1935.306252][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1935.312522][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.330245][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x3f000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) close(r4) 17:27:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000013}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x2800000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x700]}) 17:27:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x40000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000014}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4000000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) close(r4) 17:27:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x48000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x2000]}) 17:27:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000000000f0}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x4305000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x4000]}) 17:27:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4c000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000300}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) 17:27:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x60000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x5800000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0xff00]}) 17:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000500}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1936.494263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.500123][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1936.545581][T31734] validate_nla: 7 callbacks suppressed [ 1936.545591][T31734] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:27:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x800e000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000600}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x68000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 17:27:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8035000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000900}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1936.915251][T31758] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8100000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) 17:27:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x2000000]}) 17:27:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6c000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x86ddffff00000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000a00}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1937.214321][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.220139][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.235820][T31776] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x3000000]}) 17:27:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8847000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x74000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000b00}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:27:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8848000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1937.559926][T31794] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x4000000]}) 17:27:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7a000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000f00}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8864000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) [ 1937.821749][T31813] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x5000000]}) 17:27:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x87600000], [], @empty}}]}, 0x28}}, 0x0) 17:27:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x88a8ffff00000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000001100}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x6000000]}) [ 1938.149251][T31830] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) 17:27:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x88caffff00000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x97ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000001200}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x7000000]}) 17:27:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8906000000000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1938.479275][T31848] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000001300}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) 17:27:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x9effffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x8dffffff00000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x8000000]}) [ 1938.735466][T31869] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000001400}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xf5ffffff00000000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xce090000], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) 17:27:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000002963}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x20000000]}) 17:27:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000004000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1939.152431][T31891] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe1660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x40000000]}) 17:27:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0xfffffffffffff000, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) 17:27:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000006329}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1939.427505][T31913] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0xfecaedfe]}) 17:27:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe2660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x3], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000000000f000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) 17:27:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x4], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe3660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000030000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0xfeedcafe]}) 17:27:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x5], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000034000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe4660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) 17:27:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0xff000000]}) 17:27:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000400300}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 17:27:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe4ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) 17:27:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000f0ffff}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x7], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 17:27:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe5660100], [], @empty}}]}, 0x28}}, 0x0) [ 1940.654258][ C1] net_ratelimit: 15 callbacks suppressed [ 1940.654266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1940.665806][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000001000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0xb], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:27:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe6660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000002000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 17:27:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0xf], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:27:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000003000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe7660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 17:27:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x3], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1941.374269][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.380099][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) 17:27:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000004000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 17:27:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe8660100], [], @empty}}]}, 0x28}}, 0x0) [ 1941.534277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.534392][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1941.540085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1941.551669][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.557563][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000005000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) [ 1941.755050][T32058] validate_nla: 6 callbacks suppressed [ 1941.755060][T32058] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 17:27:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe9660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000006000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 17:27:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) [ 1942.164386][T32079] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000008000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x7], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xea660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) [ 1942.502048][T32099] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) 17:27:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000009000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xeb660100], [], @empty}}]}, 0x28}}, 0x0) [ 1942.734262][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 17:27:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000000a000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xd], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) [ 1942.902708][T32124] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xec660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 17:27:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x28], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000000b000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1943.209514][T32143] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) 17:27:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0xfecaedfe00000000]}) 17:27:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf0ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x58], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000000f000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1943.487801][T32157] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfdffffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) 17:27:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xf0], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000010000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) [ 1943.789111][T32172] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfeffffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000011000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 17:27:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) 17:27:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x300], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1944.149693][T32189] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000012000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfffff000], [], @empty}}]}, 0x28}}, 0x0) 17:27:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 17:27:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:27:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x543], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000013000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1944.511079][T32212] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xffffff7f], [], @empty}}]}, 0x28}}, 0x0) 17:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000014000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 17:27:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x600], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) close(r4) [ 1944.879618][T32230] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 17:27:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000040000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xffffff97], [], @empty}}]}, 0x28}}, 0x0) 17:27:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x608], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) close(r4) 17:27:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 17:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000063290000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xffffff9e], [], @empty}}]}, 0x28}}, 0x0) 17:27:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 17:27:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x689], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xffffffe4], [], @empty}}]}, 0x28}}, 0x0) 17:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe0000009effffff}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x700], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) close(r4) 17:27:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 17:27:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 1945.694264][ C1] net_ratelimit: 13 callbacks suppressed [ 1945.694273][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.694279][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.694331][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1945.700000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1945.723107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.728944][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x806], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfffffff0], [], @empty}}]}, 0x28}}, 0x0) 17:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000f0ffffff}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 17:27:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) close(r4) 17:27:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xd00], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000fffff000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfffffffd], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000ffffff7f}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 17:27:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 17:27:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfffffffe], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) close(r4) 17:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000ffffff9e}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 17:27:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x2800], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x1000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 17:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe000000fffffff0}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r4) 17:27:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 17:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0x4000000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6087ffffffff], [], @empty}}]}, 0x28}}, 0x0) [ 1946.894270][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1946.900099][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 17:27:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) 17:27:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) close(r4) 17:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x2}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1947.085623][T32364] validate_nla: 7 callbacks suppressed [ 1947.085634][T32364] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 17:27:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4305], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, &(0x7f0000000080)) 17:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x3}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x1000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) close(r4) 17:27:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4788], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) [ 1947.479245][T32393] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:17 executing program 5: socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x187bd3a3, 0x0, 0x0, 0x800e0060e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcd1acda7, 0x40002, 0x0, 0x800e00669) shutdown(r0, 0x0) 17:27:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x3000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1947.614264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1947.620106][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 17:27:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) close(r4) 17:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x5}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1947.808421][T32412] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4888], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x40030000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 17:27:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x6}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) close(r4) [ 1948.078295][T32428] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x5800], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf0ffffffffffff], [], @empty}}]}, 0x28}}, 0x0) [ 1948.372175][T32445] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, 0x0, 0x0, 0x2, 0x0, 0x800e00498) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00c21) 17:27:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x8}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 17:27:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x6488], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) close(r4) 17:27:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x100000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x9}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:18 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 1948.594777][T32457] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x800e], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) close(r4) 17:27:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x200000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xa}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1948.936926][T32482] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002540)={0x53, 0x0, 0x7, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000002400)="66d4c8b90bba9a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:27:19 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 17:27:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8035], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xb}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x300000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) close(r4) 17:27:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8100], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1949.561636][T32496] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:19 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 17:27:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x400000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) close(r4) 17:27:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8847], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:19 executing program 5: r0 = socket$inet6(0xa, 0x110000000000001, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000005600)=[{{&(0x7f00000012c0)=@in6={0xa, 0x0, 0x0, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000002440)=[{0x30, 0x1ff, 0x0, "a55581415f8cda61f4f12bc473cedc6333ad72798ce5afb88bb56e1228c036fe"}], 0x30}}], 0x1, 0x4000000) 17:27:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x10}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1949.856664][T32513] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:19 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 17:27:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x500000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:19 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8848], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) close(r4) 17:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x11}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1950.250144][T32534] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:20 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 17:27:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) 17:27:20 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8864], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x600000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x12}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) close(r4) 17:27:20 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8906], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:20 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 17:27:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x700000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x13}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) dup(r2) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 17:27:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:20 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 17:27:20 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xf000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) close(r4) 17:27:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x14}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1951.054294][ C1] net_ratelimit: 16 callbacks suppressed [ 1951.054303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.065808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.166271][T32584] print_req_error: I/O error, dev loop0, sector 1536 flags 80700 17:27:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfecaedfe]}) 17:27:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf0}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xa00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) 17:27:21 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xf0ffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:21 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x1000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1951.720565][T32584] print_req_error: I/O error, dev loop0, sector 256 flags 80700 [ 1951.774284][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.780115][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/ptmx\x00', 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="ba"], 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x100000009b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x400017}) 17:27:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe]}) 17:27:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:27:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x300}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:21 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x2000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1951.934271][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.934316][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.940155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.951801][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.957619][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:21 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x3000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x500}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:21 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 17:27:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:22 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 17:27:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) 17:27:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x600}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1952.334354][T32652] validate_nla: 5 callbacks suppressed [ 1952.334367][T32652] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 17:27:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x1f00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x900}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:27:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 1952.682824][T32669] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x6000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x2000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xa00}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1952.896231][T32680] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 17:27:22 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 1953.012213][T32688] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:22 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x7000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x20000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) [ 1953.134281][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xb00}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x260f000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1953.297692][T32698] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 17:27:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 17:27:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf00}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1953.396920][T32704] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:23 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x33, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x3f00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) 17:27:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1100}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8060000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 17:27:23 executing program 5: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0xff000000]}) [ 1953.815538][T32722] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:23 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xd000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1200}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) 17:27:23 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 17:27:24 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b409ff", 0x3, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1954.223191][T32743] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x28000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1300}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0xe4660100], [], @empty}}]}, 0x28}}, 0x0) 17:27:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 17:27:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x40000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1400}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1954.633863][T32763] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) [ 1954.715591][T32766] netlink: 'syz-executor.5': attribute type 23 has an invalid length. 17:27:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x4c00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:24 executing program 5 (fault-call:7 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:24 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x43050000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:24 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 17:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x2963}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6000000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1955.203835][ T319] FAULT_INJECTION: forcing a failure. [ 1955.203835][ T319] name failslab, interval 1, probability 0, space 0, times 0 17:27:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) [ 1955.300770][ T319] CPU: 1 PID: 319 Comm: syz-executor.5 Not tainted 5.2.0-rc6+ #34 [ 1955.308621][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1955.308630][ T319] Call Trace: [ 1955.308665][ T319] dump_stack+0x172/0x1f0 [ 1955.308695][ T319] should_fail.cold+0xa/0x15 [ 1955.308722][ T319] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1955.336777][ T319] ? ___might_sleep+0x163/0x280 [ 1955.341658][ T319] __should_failslab+0x121/0x190 [ 1955.346617][ T319] should_failslab+0x9/0x14 [ 1955.351134][ T319] __kmalloc+0x2d9/0x740 [ 1955.355396][ T319] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 1955.361188][ T319] ? rcu_read_lock_sched_held+0x110/0x130 [ 1955.366926][ T319] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 1955.372669][ T319] tomoyo_realpath_from_path+0xcd/0x7a0 [ 1955.378234][ T319] ? tomoyo_path_number_perm+0x193/0x520 [ 1955.383888][ T319] tomoyo_path_number_perm+0x1dd/0x520 [ 1955.383903][ T319] ? tomoyo_path_number_perm+0x193/0x520 [ 1955.383921][ T319] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1955.383946][ T319] ? __f_unlock_pos+0x19/0x20 [ 1955.405531][ T319] ? ___might_sleep+0x163/0x280 [ 1955.410423][ T319] ? selinux_file_mprotect+0x620/0x620 [ 1955.415904][ T319] ? __fget+0x381/0x550 [ 1955.420081][ T319] ? ksys_dup3+0x3e0/0x3e0 [ 1955.424518][ T319] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1955.430781][ T319] ? fput_many+0x12c/0x1a0 [ 1955.435222][ T319] tomoyo_file_ioctl+0x23/0x30 [ 1955.439996][ T319] security_file_ioctl+0x77/0xc0 [ 1955.444948][ T319] ksys_ioctl+0x57/0xd0 17:27:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x58000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) [ 1955.444965][ T319] __x64_sys_ioctl+0x73/0xb0 [ 1955.444985][ T319] do_syscall_64+0xfd/0x680 [ 1955.445005][ T319] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1955.445016][ T319] RIP: 0033:0x459519 [ 1955.445031][ T319] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1955.445039][ T319] RSP: 002b:00007f38eaadec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1955.445052][ T319] RAX: ffffffffffffffda RBX: 00007f38eaadec90 RCX: 0000000000459519 [ 1955.445061][ T319] RDX: 0000000000000000 RSI: 000000000000540b RDI: 0000000000000003 [ 1955.445068][ T319] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1955.445076][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38eaadf6d4 [ 1955.445084][ T319] R13: 00000000004c39d9 R14: 00000000004d75f8 R15: 0000000000000005 17:27:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 17:27:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) 17:27:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x800e0000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1955.744526][ T319] ERROR: Out of memory at tomoyo_realpath_from_path. 17:27:25 executing program 5 (fault-call:7 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x6329}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x80350000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:25 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfecaedfe00000000]}) 17:27:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x6c00000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1956.094318][ C0] net_ratelimit: 12 callbacks suppressed [ 1956.094326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1956.094356][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1956.100134][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1956.105933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1956.123092][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1956.198916][ T358] FAULT_INJECTION: forcing a failure. [ 1956.198916][ T358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1956.212207][ T358] CPU: 0 PID: 358 Comm: syz-executor.5 Not tainted 5.2.0-rc6+ #34 [ 1956.220017][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1956.230087][ T358] Call Trace: [ 1956.233407][ T358] dump_stack+0x172/0x1f0 [ 1956.237766][ T358] should_fail.cold+0xa/0x15 [ 1956.242381][ T358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1956.242411][ T358] should_fail_alloc_page+0x50/0x60 [ 1956.242435][ T358] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1956.258841][ T358] ? __lock_acquire+0x54f/0x5490 [ 1956.263792][ T358] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1956.269536][ T358] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1956.269560][ T358] cache_grow_begin+0x9d/0x650 [ 1956.269578][ T358] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1956.269597][ T358] __kmalloc+0x67c/0x740 [ 1956.290663][ T358] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 1956.296397][ T358] tomoyo_realpath_from_path+0xcd/0x7a0 [ 1956.296419][ T358] ? tomoyo_path_number_perm+0x193/0x520 [ 1956.296441][ T358] tomoyo_path_number_perm+0x1dd/0x520 [ 1956.296463][ T358] ? tomoyo_path_number_perm+0x193/0x520 [ 1956.313092][ T358] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1956.313110][ T358] ? __f_unlock_pos+0x19/0x20 [ 1956.313134][ T358] ? ___might_sleep+0x163/0x280 [ 1956.313165][ T358] ? selinux_file_mprotect+0x620/0x620 [ 1956.339565][ T358] ? __fget+0x381/0x550 [ 1956.339588][ T358] ? ksys_dup3+0x3e0/0x3e0 [ 1956.339605][ T358] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1956.339619][ T358] ? fput_many+0x12c/0x1a0 [ 1956.339640][ T358] tomoyo_file_ioctl+0x23/0x30 [ 1956.363939][ T358] security_file_ioctl+0x77/0xc0 [ 1956.368902][ T358] ksys_ioctl+0x57/0xd0 [ 1956.373069][ T358] __x64_sys_ioctl+0x73/0xb0 [ 1956.377673][ T358] do_syscall_64+0xfd/0x680 [ 1956.377694][ T358] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1956.377706][ T358] RIP: 0033:0x459519 17:27:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x81000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x86ddffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1956.377723][ T358] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1956.377730][ T358] RSP: 002b:00007f38eaadec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1956.377744][ T358] RAX: ffffffffffffffda RBX: 00007f38eaadec90 RCX: 0000000000459519 [ 1956.377752][ T358] RDX: 0000000000000000 RSI: 000000000000540b RDI: 0000000000000003 [ 1956.377773][ T358] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:27:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 17:27:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) 17:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1956.411655][ T358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38eaadf6d4 [ 1956.411665][ T358] R13: 00000000004c39d9 R14: 00000000004d75f8 R15: 0000000000000004 17:27:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x88470000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:26 executing program 5 (fault-call:7 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 17:27:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7400000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x88480000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x30000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) 17:27:26 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 17:27:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x7a00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x34000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:26 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x88640000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1956.992411][ T398] FAULT_INJECTION: forcing a failure. [ 1956.992411][ T398] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.022912][ T398] CPU: 1 PID: 398 Comm: syz-executor.5 Not tainted 5.2.0-rc6+ #34 [ 1957.030764][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1957.040833][ T398] Call Trace: [ 1957.044162][ T398] dump_stack+0x172/0x1f0 [ 1957.048528][ T398] should_fail.cold+0xa/0x15 [ 1957.053155][ T398] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1957.058990][ T398] ? ___might_sleep+0x163/0x280 [ 1957.063873][ T398] __should_failslab+0x121/0x190 [ 1957.068839][ T398] should_failslab+0x9/0x14 [ 1957.073363][ T398] __kmalloc+0x2d9/0x740 [ 1957.077626][ T398] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1957.083894][ T398] ? d_absolute_path+0x11b/0x170 [ 1957.088853][ T398] ? __d_path+0x140/0x140 [ 1957.093203][ T398] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1957.098598][ T398] tomoyo_encode2.part.0+0xf5/0x400 [ 1957.098618][ T398] tomoyo_encode+0x2b/0x50 [ 1957.098640][ T398] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 1957.113903][ T398] tomoyo_path_number_perm+0x1dd/0x520 [ 1957.113919][ T398] ? tomoyo_path_number_perm+0x193/0x520 [ 1957.113934][ T398] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1957.113960][ T398] ? __f_unlock_pos+0x19/0x20 [ 1957.135559][ T398] ? ___might_sleep+0x163/0x280 17:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x400300}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1957.140454][ T398] ? selinux_file_mprotect+0x620/0x620 [ 1957.145932][ T398] ? __fget+0x381/0x550 [ 1957.145955][ T398] ? ksys_dup3+0x3e0/0x3e0 [ 1957.145971][ T398] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1957.145996][ T398] ? fput_many+0x12c/0x1a0 [ 1957.160823][ T398] tomoyo_file_ioctl+0x23/0x30 [ 1957.160842][ T398] security_file_ioctl+0x77/0xc0 [ 1957.160858][ T398] ksys_ioctl+0x57/0xd0 [ 1957.160877][ T398] __x64_sys_ioctl+0x73/0xb0 [ 1957.183755][ T398] do_syscall_64+0xfd/0x680 17:27:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x88a8ffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1957.188323][ T398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1957.194229][ T398] RIP: 0033:0x459519 [ 1957.194247][ T398] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1957.194255][ T398] RSP: 002b:00007f38eaadec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1957.194270][ T398] RAX: ffffffffffffffda RBX: 00007f38eaadec90 RCX: 0000000000459519 [ 1957.194278][ T398] RDX: 0000000000000000 RSI: 000000000000540b RDI: 0000000000000003 [ 1957.194285][ T398] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1957.194293][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38eaadf6d4 [ 1957.194300][ T398] R13: 00000000004c39d9 R14: 00000000004d75f8 R15: 0000000000000005 [ 1957.294263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1957.300085][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1957.428463][ T398] ERROR: Out of memory at tomoyo_realpath_from_path. 17:27:27 executing program 5 (fault-call:7 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 17:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf0ffff}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x88caffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:27:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x97ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) [ 1957.562024][ T426] validate_nla: 6 callbacks suppressed [ 1957.562034][ T426] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 17:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x89060000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:27:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x9effffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x2000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:27:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8dffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1957.909334][ T447] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:27 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 17:27:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x3000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xce09000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1958.014285][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1958.020140][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:27 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xf5ffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) [ 1958.156807][ T462] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1958.174253][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x2, 0x0) 17:27:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xffffa888], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 17:27:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe166010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xffffca88], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 17:27:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x10, 0x0) 17:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x5000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe266010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) 17:27:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xffffdd86], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) [ 1958.742759][ T500] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x6000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe366010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x1269, 0x0) 17:27:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) 17:27:28 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xfffff000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 17:27:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x8000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1959.054464][ T515] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xffffff8d], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4b47, 0x0) 17:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x9000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 17:27:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe466010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) 17:27:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xfffffff5], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xa000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 17:27:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4b49, 0x0) [ 1959.474599][ T549] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) 17:27:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe4ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xf0ffffffffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xb000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) [ 1959.775551][ T567] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4b71, 0x0) 17:27:29 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x100000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe566010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) 17:27:29 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 17:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x10000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x200000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4c00, 0x0) [ 1960.200365][ T598] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 17:27:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) 17:27:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x300000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe666010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x11000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4c01, 0x0) 17:27:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 1960.570915][ T623] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x12000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x400000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe766010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) 17:27:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 17:27:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4c04, 0x0) 17:27:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x13000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe866010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:30 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x600000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 17:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x14000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1961.133652][ T659] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x700000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4c05, 0x0) 17:27:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:27:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xe966010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 17:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x40000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1961.454268][ C1] net_ratelimit: 14 callbacks suppressed [ 1961.454277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.465881][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x800000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5409, 0x0) 17:27:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 17:27:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xea66010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x63290000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) close(r4) 17:27:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 17:27:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xeb66010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x806000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:31 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 17:27:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xec66010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540a, 0x0) 17:27:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x9effffff}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:31 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xd00000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) close(r4) 17:27:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf0ffffff}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xf0ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) [ 1962.174273][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.180151][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x2800000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 17:27:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xfffff000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1962.334278][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.334284][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.334351][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.340144][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1962.357456][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.363273][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540c, 0x0) 17:27:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfdffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 17:27:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4000000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) close(r4) 17:27:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xffffff7f}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1962.622935][ T750] validate_nla: 5 callbacks suppressed [ 1962.622945][ T750] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540d, 0x0) 17:27:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 17:27:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x4305000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xffffff9e}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfeffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) close(r4) 17:27:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xfffffff0}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:32 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x5800000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1962.993268][ T776] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:32 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfecaedfe]}) 17:27:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5410, 0x0) 17:27:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xffffff7f00000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x800e000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x3000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1963.265281][ T792] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:33 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe]}) 17:27:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8035000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xffffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) close(r4) 17:27:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x40030000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5411, 0x0) 17:27:33 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) [ 1963.532885][ T812] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8100000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xffffffff87600000], [], @empty}}]}, 0x28}}, 0x0) 17:27:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf0ffffffffffff}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x86ddffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5412, 0x0) 17:27:33 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 17:27:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r4) [ 1963.826756][ T828] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0xfffffffffffff000], [], @empty}}]}, 0x28}}, 0x0) 17:27:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x100000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:33 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 17:27:33 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8847000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1964.087002][ T846] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5413, 0x0) 17:27:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x200000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 17:27:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x2], [], @empty}}]}, 0x28}}, 0x0) 17:27:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8848000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) close(r4) 17:27:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5414, 0x0) 17:27:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 17:27:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x300000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1964.537691][ T871] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8864000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x3], [], @empty}}]}, 0x28}}, 0x0) 17:27:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 17:27:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) close(r4) 17:27:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5415, 0x0) 17:27:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x400000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1964.847645][ T888] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:34 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x88a8ffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4], [], @empty}}]}, 0x28}}, 0x0) 17:27:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 17:27:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x500000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1965.123253][ T908] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5416, 0x0) 17:27:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x88caffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) close(r4) 17:27:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 17:27:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x5], [], @empty}}]}, 0x28}}, 0x0) 17:27:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8906000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x600000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 17:27:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5418, 0x0) [ 1965.501394][ T929] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) close(r4) 17:27:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x8dffffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6], [], @empty}}]}, 0x28}}, 0x0) 17:27:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x800000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 17:27:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7], [], @empty}}]}, 0x28}}, 0x0) 17:27:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xf5ffffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x541a, 0x0) 17:27:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) close(r4) 17:27:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x900000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:35 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 17:27:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x8], [], @empty}}]}, 0x28}}, 0x0) 17:27:35 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0xfffffffffffff000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xa00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x541b, 0x0) 17:27:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xa], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfecaedfe00000000]}) 17:27:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) close(r4) 17:27:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xb00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 17:27:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x3], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1966.494257][ C1] net_ratelimit: 13 callbacks suppressed [ 1966.494266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.494307][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1966.500000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1966.517391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.523164][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) close(r4) 17:27:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x541c, 0x0) 17:27:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 17:27:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x10], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 17:27:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) close(r4) 17:27:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1000000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:36 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x541d, 0x0) 17:27:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 17:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1100000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x7], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x48], [], @empty}}]}, 0x28}}, 0x0) 17:27:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x541e, 0x0) 17:27:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) close(r4) 17:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1200000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 17:27:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4c], [], @empty}}]}, 0x28}}, 0x0) 17:27:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xd], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1300000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) close(r4) 17:27:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 1967.694286][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1967.700232][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1967.716437][ T1084] validate_nla: 8 callbacks suppressed [ 1967.716447][ T1084] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x541f, 0x0) 17:27:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x28], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x1400000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x60], [], @empty}}]}, 0x28}}, 0x0) 17:27:37 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 17:27:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x58], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x4000000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1968.067015][ T1110] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) close(r4) 17:27:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5420, 0x0) 17:27:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x68], [], @empty}}]}, 0x28}}, 0x0) 17:27:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xf0], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 1968.317316][ T1124] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x6329000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) 17:27:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6c], [], @empty}}]}, 0x28}}, 0x0) 17:27:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x300], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1968.414277][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1968.420106][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) [ 1968.564437][ T1142] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1968.574276][ C0] protocol 88fb is buggy, dev hsr_slave_0 17:27:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5421, 0x0) 17:27:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x74], [], @empty}}]}, 0x28}}, 0x0) 17:27:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0x9effffff00000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x543], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:27:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 1968.810968][ T1157] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7a], [], @empty}}]}, 0x28}}, 0x0) 17:27:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xf0ffffff00000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5423, 0x0) 17:27:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x600], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:38 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 17:27:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) [ 1969.129796][ T1174] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xffffff7f00000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf0], [], @empty}}]}, 0x28}}, 0x0) 17:27:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 17:27:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5424, 0x0) 17:27:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x608], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000, 0xfffffffffffff000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1969.444515][ T1194] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:27:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) 17:27:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x3, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x300], [], @empty}}]}, 0x28}}, 0x0) 17:27:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x689], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5425, 0x0) [ 1969.750937][ T1213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:27:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) 17:27:39 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 17:27:39 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x700], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1969.941479][ T1221] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x500], [], @empty}}]}, 0x28}}, 0x0) 17:27:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x28, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x806], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) 17:27:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5427, 0x0) 17:27:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) [ 1970.222719][ T1241] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1970.290490][ T1239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:27:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x600], [], @empty}}]}, 0x28}}, 0x0) 17:27:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xd00], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 17:27:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x7ffff, 0x16, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) [ 1970.513933][ T1257] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5428, 0x0) 17:27:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) 17:27:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x700], [], @empty}}]}, 0x28}}, 0x0) [ 1970.771259][ T1266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:27:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 17:27:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x2800], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5437, 0x0) 17:27:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x9ce], [], @empty}}]}, 0x28}}, 0x0) 17:27:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x18, @ipv6=@ipv4={[0x5b00], [], @empty}}]}, 0x28}}, 0x0) 17:27:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) 17:27:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:40 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 17:27:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5441, 0x0) 17:27:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xa00], [], @empty}}]}, 0x28}}, 0x0) 17:27:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b02], [], @empty}}]}, 0x28}}, 0x0) 17:27:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:41 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 17:27:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) 17:27:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5450, 0x0) 17:27:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe00], [], @empty}}]}, 0x28}}, 0x0) 17:27:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b03], [], @empty}}]}, 0x28}}, 0x0) 17:27:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4305], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:41 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 17:27:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b04], [], @empty}}]}, 0x28}}, 0x0) 17:27:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5451, 0x0) 17:27:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf00], [], @empty}}]}, 0x28}}, 0x0) [ 1971.854260][ C1] net_ratelimit: 13 callbacks suppressed [ 1971.854269][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1971.865848][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4788], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) 17:27:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4888], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:41 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 17:27:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b05], [], @empty}}]}, 0x28}}, 0x0) 17:27:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5452, 0x0) 17:27:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf26], [], @empty}}]}, 0x28}}, 0x0) 17:27:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x5800], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) 17:27:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 17:27:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b06], [], @empty}}]}, 0x28}}, 0x0) 17:27:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x1f00], [], @empty}}]}, 0x28}}, 0x0) 17:27:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x6488], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x545d, 0x0) [ 1972.574313][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.580174][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 17:27:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) [ 1972.734300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.734343][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.740199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.752006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.757860][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.778344][ T1388] validate_nla: 6 callbacks suppressed 17:27:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x800e], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1972.778356][ T1388] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b08], [], @empty}}]}, 0x28}}, 0x0) 17:27:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5460, 0x0) 17:27:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x2000], [], @empty}}]}, 0x28}}, 0x0) 17:27:42 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 17:27:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8035], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b09], [], @empty}}]}, 0x28}}, 0x0) [ 1973.118749][ T1413] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:27:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) 17:27:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x260f], [], @empty}}]}, 0x28}}, 0x0) 17:27:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b0a], [], @empty}}]}, 0x28}}, 0x0) 17:27:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8100], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x5607, 0x0) [ 1973.424585][ T1431] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfecaedfe]}) 17:27:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:27:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x3f00], [], @empty}}]}, 0x28}}, 0x0) 17:27:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8847], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b0b], [], @empty}}]}, 0x28}}, 0x0) 17:27:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x6364, 0x0) 17:27:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe]}) [ 1973.744277][ T1451] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:43 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8848], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b0f], [], @empty}}]}, 0x28}}, 0x0) [ 1973.934274][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) 17:27:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4000], [], @empty}}]}, 0x28}}, 0x0) 17:27:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x7704, 0x0) 17:27:43 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) [ 1974.120311][ T1475] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8864], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4800], [], @empty}}]}, 0x28}}, 0x0) 17:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b10], [], @empty}}]}, 0x28}}, 0x0) 17:27:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) 17:27:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x8912, 0x0) 17:27:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 17:27:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8906], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1974.428792][ T1492] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x8914, 0x0) 17:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4c00], [], @empty}}]}, 0x28}}, 0x0) 17:27:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) 17:27:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xf000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 17:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b11], [], @empty}}]}, 0x28}}, 0x0) 17:27:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x8916, 0x0) [ 1974.809079][ T1521] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b12], [], @empty}}]}, 0x28}}, 0x0) 17:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6000], [], @empty}}]}, 0x28}}, 0x0) 17:27:44 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 17:27:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xf0ffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) 17:27:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x8917, 0x0) [ 1975.207822][ T1541] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 17:27:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b13], [], @empty}}]}, 0x28}}, 0x0) 17:27:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x1000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6087], [], @empty}}]}, 0x28}}, 0x0) 17:27:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) 17:27:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 17:27:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b14], [], @empty}}]}, 0x28}}, 0x0) [ 1975.531311][ T1566] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x8933, 0x0) 17:27:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x2000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 17:27:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6800], [], @empty}}]}, 0x28}}, 0x0) 17:27:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) 17:27:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x2], [], @empty}}]}, 0x28}}, 0x0) 17:27:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x8980, 0x0) 17:27:45 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x3000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1975.959914][ T1591] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:45 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 17:27:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6c00], [], @empty}}]}, 0x28}}, 0x0) 17:27:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) 17:27:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 17:27:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x89e0, 0x0) 17:27:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x3], [], @empty}}]}, 0x28}}, 0x0) 17:27:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7400], [], @empty}}]}, 0x28}}, 0x0) 17:27:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 17:27:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x6000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x89f1, 0x0) 17:27:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) 17:27:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7a00], [], @empty}}]}, 0x28}}, 0x0) 17:27:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x4], [], @empty}}]}, 0x28}}, 0x0) 17:27:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) 17:27:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x7000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xae01, 0x0) [ 1976.894291][ C0] net_ratelimit: 13 callbacks suppressed [ 1976.894299][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1976.894331][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1976.900176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1976.905972][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1976.923135][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xce09], [], @empty}}]}, 0x28}}, 0x0) 17:27:46 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:46 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfecaedfe00000000]}) 17:27:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:27:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x5], [], @empty}}]}, 0x28}}, 0x0) 17:27:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xae41, 0x0) 17:27:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf000], [], @empty}}]}, 0x28}}, 0x0) 17:27:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 17:27:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8060000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x6], [], @empty}}]}, 0x28}}, 0x0) 17:27:47 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e1], [], @empty}}]}, 0x28}}, 0x0) 17:27:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xd000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) close(r4) 17:27:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xae80, 0x0) 17:27:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e2], [], @empty}}]}, 0x28}}, 0x0) 17:27:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x28000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:47 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) 17:27:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x8], [], @empty}}]}, 0x28}}, 0x0) [ 1977.986416][ T1705] validate_nla: 6 callbacks suppressed [ 1977.986427][ T1705] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40045431, 0x0) 17:27:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) close(r4) 17:27:47 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x80000000, 0x2047fd) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0xcf, 0xfffffffffffffff8}}) 17:27:47 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x40000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e3], [], @empty}}]}, 0x28}}, 0x0) [ 1978.094277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1978.100102][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:48 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000)) 17:27:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40045436, 0x0) [ 1978.315255][ T1729] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x9], [], @empty}}]}, 0x28}}, 0x0) 17:27:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) close(r4) 17:27:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x43050000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e4], [], @empty}}]}, 0x28}}, 0x0) 17:27:48 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x8}, 0x4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1fffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/34, 0x20000099}], 0x1) times(&(0x7f0000000000)) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x57) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x2, 0x7ff, 0x20000000000004, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) [ 1978.609313][ T1744] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xa], [], @empty}}]}, 0x28}}, 0x0) 17:27:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x58000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e5], [], @empty}}]}, 0x28}}, 0x0) 17:27:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x400454ca, 0x0) [ 1978.814270][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1978.820092][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) close(r4) [ 1978.962687][ T1764] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1978.974248][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:27:48 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x800e0000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40045564, 0x0) 17:27:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xb], [], @empty}}]}, 0x28}}, 0x0) 17:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e6], [], @empty}}]}, 0x28}}, 0x0) 17:27:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) close(r4) 17:27:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x80350000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1979.211239][ T1791] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:49 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e7], [], @empty}}]}, 0x28}}, 0x0) 17:27:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40047451, 0x0) 17:27:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf], [], @empty}}]}, 0x28}}, 0x0) 17:27:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r4) 17:27:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x81000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x86ddffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1979.787557][ T1818] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40049409, 0x0) 17:27:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x10], [], @empty}}]}, 0x28}}, 0x0) 17:27:49 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x0, 0x71f, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) socket$xdp(0x2c, 0x3, 0x0) 17:27:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e8], [], @empty}}]}, 0x28}}, 0x0) 17:27:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) close(r4) 17:27:49 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x88470000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) flistxattr(r0, &(0x7f0000000180)=""/224, 0xe0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) [ 1980.182937][ T1839] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x88480000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40086602, 0x0) 17:27:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x11], [], @empty}}]}, 0x28}}, 0x0) 17:27:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166e9], [], @empty}}]}, 0x28}}, 0x0) 17:27:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) close(r4) [ 1980.416975][ T1857] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x88640000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000180)="5a29fbb0344d354d88c841e8d8e62572272b4c289c5a4e3778b2cf6b4ecbe894fde2d841179b4f6766d40e53b3e0ff58aa8e1adff0e1fb0c223c30abbdf8670acdbfa6c6367524f9f2e2e34c360472b0a79cd87fbf2845779839e0889855fd265425ee6901347ea34eda9adb49b94632a890db30da6e493c5a4e0e0c5f5aeb2ca6f4288b4d99e84c4d944b84b6a9e02ad918aeef62dbad177327dcdd3a0e20326d8d34fd6fec802b290654b306735f9e13b406f9c9821acb0e5b3242e619719f84f2") ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x400001, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166ea], [], @empty}}]}, 0x28}}, 0x0) 17:27:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40087602, 0x0) 17:27:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x12], [], @empty}}]}, 0x28}}, 0x0) 17:27:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) close(r4) 17:27:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x88a8ffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166eb], [], @empty}}]}, 0x28}}, 0x0) 17:27:50 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80c03) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x6dab, 0x0, 0x6f2df6551393ffa1, 0x8}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x7fffffff, r2}) 17:27:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x401054d5, 0x0) 17:27:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) close(r4) 17:27:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x13], [], @empty}}]}, 0x28}}, 0x0) [ 1981.119459][ T1896] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x88caffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x166ec], [], @empty}}]}, 0x28}}, 0x0) 17:27:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000000)) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/245) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x89060000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4018620d, 0x0) 17:27:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x14], [], @empty}}]}, 0x28}}, 0x0) 17:27:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) close(r4) [ 1981.479459][ T1918] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8dffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xa8, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x0, 0x2) 17:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x30000], [], @empty}}]}, 0x28}}, 0x0) 17:27:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xf5ffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x4020940d, 0x0) 17:27:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) close(r4) 17:27:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000180)=""/145) 17:27:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf0], [], @empty}}]}, 0x28}}, 0x0) 17:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x34000], [], @empty}}]}, 0x28}}, 0x0) 17:27:51 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xffffa888], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x40345622, 0x0) 17:27:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) close(r4) 17:27:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xffffca88], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:52 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="290000002000193201010003000000000200000000e80001dd0000040d000400ea11d3fe4e9e225d54", 0x29}], 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) 17:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x400300], [], @empty}}]}, 0x28}}, 0x0) [ 1982.254272][ C1] net_ratelimit: 14 callbacks suppressed [ 1982.254281][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.266085][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x300], [], @empty}}]}, 0x28}}, 0x0) 17:27:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x800448d3, 0x0) 17:27:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xffffdd86], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf0ffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:52 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x80000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0x2, 0x6}}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) close(r4) 17:27:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x500], [], @empty}}]}, 0x28}}, 0x0) 17:27:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xfffff000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80045430, 0x0) 17:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x1000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:52 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) 17:27:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x600], [], @empty}}]}, 0x28}}, 0x0) 17:27:52 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xffffff8d], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) close(r4) [ 1982.974257][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.980109][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80045432, 0x0) 17:27:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x900], [], @empty}}]}, 0x28}}, 0x0) 17:27:53 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000108}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x148, r1, 0x210, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x134, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff5b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6cd7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x0, 0x5, 0x3, 0x10001, 0xf97b, 0x100000001, 0x800, 0x7, 0x1, 0xd30, 0x2, 0x7fff, 0xffffffff, 0x5, 0x40, 0x3, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffffb, 0x8, 0x5, 0x81, 0x5, 0x1, 0x0, 0x1f, 0xc478, 0x5, 0x6, 0x8]}) [ 1983.134253][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.134291][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.140067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1983.145840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1983.151611][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.163039][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x2000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xfffffff5], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xa00], [], @empty}}]}, 0x28}}, 0x0) [ 1983.322999][ T2036] validate_nla: 7 callbacks suppressed [ 1983.323010][ T2036] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bridge_slave_1\x00') ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x559080) 17:27:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80045438, 0x0) 17:27:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x3000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) close(r4) 17:27:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xf0ffffffffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xb00], [], @empty}}]}, 0x28}}, 0x0) [ 1983.653892][ T2057] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:53 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xa0000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfca, 0x32315559, 0x3, @discrete={0x4, 0x6}}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x8, 0x5, 0x80000000, 0x100000000, 0x6, 0x81, 0x3, 0x9449, 0x3, 0x4, 0xff, 0xfffffffffffffffc, 0x400, 0x84, 0x7, 0x3, 0x1, 0x1323, 0x7, 0x0, 0x10001, 0x104000, 0x5, 0x0, 0x5, 0x6, 0x1, 0x9, 0x9, 0xffffffffffff2e92, 0x10000, 0x8000]}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80045439, 0x0) 17:27:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x100000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) close(r4) 17:27:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf00], [], @empty}}]}, 0x28}}, 0x0) [ 1983.952751][ T2078] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0xf, @sdr={0x337a4742, 0xffff}}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x400000000007ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80045440, 0x0) 17:27:53 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x200000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x5000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1100], [], @empty}}]}, 0x28}}, 0x0) 17:27:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x103000, 0x0) socketpair(0x5, 0x0, 0x6, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) mq_timedsend(r2, &(0x7f0000000380)="be6bbbbc10ecbbc87c281591ee9939a10ccab09ff924ed745f769c0b33d71a1267d30c2d4bef9e4df7bbc331da4f9865453b3b75a85e75802486499084902fce9dc43bc1faf60863c18baea7444bf5b57d8b704b796926eee4b3cb659bf52c1c3d11d35d01997473cc80101e611af657a7de", 0x72, 0xe9c, &(0x7f0000000040)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000200)=0x5, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000001c0)) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000180)={0x9, {0x45d, 0x4, 0x7f, 0x3}}) 17:27:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x300000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) [ 1984.332959][ T2098] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x800454d2, 0x0) 17:27:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1200], [], @empty}}]}, 0x28}}, 0x0) 17:27:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x400000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x410000, 0x20) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000180)={r2, 0x1}) [ 1984.647509][ T2122] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:27:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1300], [], @empty}}]}, 0x28}}, 0x0) 17:27:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x600000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:54 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x81, 0x3, 0x70}) accept(r1, &(0x7f00000001c0)=@ax25={{}, [@null, @default, @default, @default, @bcast, @netrom, @null]}, &(0x7f0000000240)=0x80) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80086301, 0x0) [ 1984.963106][ T2142] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1400], [], @empty}}]}, 0x28}}, 0x0) 17:27:54 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x700000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x8000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) 17:27:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80086601, 0x0) 17:27:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x401000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/sockcreate\x00') preadv(r2, &(0x7f00000017c0), 0x1aa, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x2963], [], @empty}}]}, 0x28}}, 0x0) [ 1985.333435][ T2167] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x800000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xa000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80087601, 0x0) 17:27:55 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x6, 0x7f, [], &(0x7f0000000040)=0x3}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x7fffffff, 0x8000000000, 0x3, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:27:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x4000], [], @empty}}]}, 0x28}}, 0x0) 17:27:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x806000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1985.681278][ T2186] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:55 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x30, 0x4) 17:27:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x6329], [], @empty}}]}, 0x28}}, 0x0) 17:27:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x80605414, 0x0) 17:27:55 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xd00000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1985.927421][ T2200] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) 17:27:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x2800000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf000], [], @empty}}]}, 0x28}}, 0x0) 17:27:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = getpgid(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) tgkill(r1, r2, 0x25) [ 1986.236138][ T2217] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc0045878, 0x0) 17:27:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4000000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x30000], [], @empty}}]}, 0x28}}, 0x0) 17:27:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x10000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) 17:27:56 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7f, 0x50880) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc0045878, 0x0) 17:27:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x4305000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x34000], [], @empty}}]}, 0x28}}, 0x0) 17:27:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x1f000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) 17:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x400300], [], @empty}}]}, 0x28}}, 0x0) 17:27:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc004743e, 0x0) 17:27:56 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x5800000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:56 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x20000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x800e000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf0ffff], [], @empty}}]}, 0x28}}, 0x0) 17:27:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) 17:27:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x260f0000], [], @empty}}]}, 0x28}}, 0x0) [ 1987.294268][ C1] net_ratelimit: 12 callbacks suppressed [ 1987.294277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.294283][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.294341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.300080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.323173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.329031][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc008561c, 0x0) 17:27:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8035000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) 17:27:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = dup(r0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz1\x00') ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x3f000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc0106401, 0x0) 17:27:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x2000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8100000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:57 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x40000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x3000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) 17:27:57 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) 17:27:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x86ddffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc010640c, 0x0) 17:27:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x48000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x4000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) 17:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4c000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8847000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:58 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/88) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc0189436, 0x0) [ 1988.464032][ T2357] validate_nla: 7 callbacks suppressed [ 1988.464042][ T2357] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1988.494283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1988.500097][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:27:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x5000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8848000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x60000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) 17:27:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc020660b, 0x0) 17:27:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x6000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8864000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1988.847415][ T2380] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:58 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x68000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x8000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc0306201, 0x0) 17:27:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:27:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x88a8ffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1989.150935][ T2399] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xfffffffffffffffc, 0x7ff, 0x6, {0x100000000000001, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) [ 1989.214302][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1989.220208][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x9000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6c000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x88caffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:27:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc0585609, 0x0) [ 1989.448712][ T2419] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xa000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000340)={0x1000, {{0x2, 0x4e20, @rand_addr=0xfc}}, {{0x2, 0x4e22, @rand_addr=0x7fc0000000000}}}, 0x108) getpeername$inet(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 17:27:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x74000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8906000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xb000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0xc1105511, 0x0) 17:27:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x4, 0x7fd, 0x3, {0xffffffffffffffff, @raw_data="5e919c503534565e127053498500ad951d38c9958e80fa1f8f5aecde2f646538dc2e433304540f1234db6658ab44f36718e3c51107663cec50964a184dd1ca7f67351ad793c1f896be32c945eee3e3d0275851cb65b50b5da01bc82c2448ad8801370c2bea720733d43a9db5dcd343070f4b2ca12839cb0cc0ec775d170d25b27fde3e09fc4d347f5469eeba787e49a9f91b0daf29dc22e8ce5e00adadf86b4c3891a42b53ca6f645778407707eb0f764f272c0c24fd89369515296df969eb0bd4872f91ccb6fb52"}}) [ 1989.787112][ T2443] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:27:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) 17:27:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7a000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x8dffffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf000000], [], @empty}}]}, 0x28}}, 0x0) 17:27:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x2, 0x0, 0x300b, 0x2, 0x8, 0xff, 0x3ff, 0x1}) [ 1990.064559][ T2458] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x2) 17:28:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xf5ffffff00000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x10000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x87600000], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x4, 0x401, @value=0x3}) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x861e, 0xa03) openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) [ 1990.322493][ T2476] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) 17:28:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x3) 17:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x11000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0xfffffffffffff000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x97ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x408400, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000180)={[0x6000, 0x2004, 0x1f000, 0x4000], 0x80, 0x10, 0x507}) 17:28:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) 17:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x12000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x4) [ 1990.713418][ T2504] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x9effffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x3], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x13000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="61dfd8ecc6b4a2eb04fbe35a1120fd70e088e58298997a99b32227a02f6d41417fa2202b47ac0da1073f1aeee64e0ce3a9a8fcfba6d492c8b48fc8a9b4dd771b00dc34eda0a4a4584a762ff87d7f5376b4a302d3f018a9978d8de4b28ec8c3f6d7129fec0d70b91669ea64ad70aa944644ed8e88b60a3a119cc5d719004b4c453d3340fbc91e052322c6490e0e272a082a50aca1fd861d9eeb27023150f60de307b8822f419b493cdc590b3f3263bfe14858cc136717766caee76cf30fa4f2fe98619625b2a944f98192a232d5e710657f", 0xd1}], 0x1, 0x0) 17:28:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) [ 1990.985439][ T2523] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xce090000], [], @empty}}]}, 0x28}}, 0x0) 17:28:00 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x4], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x14000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x5) 17:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x40000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) [ 1991.288880][ T2549] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:01 executing program 4: lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02a15828ca836d2017a4811927df49373cec48"], 0x13, 0x3) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000280)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe1660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x63290000], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x7], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x6) 17:28:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) 17:28:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x20000) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000180)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 17:28:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe2660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x9effffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x7) 17:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe3660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) 17:28:01 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xd], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf0ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) 17:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe4660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={0x20}, 0x8, 0x80800) 17:28:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x28], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x8) 17:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xfffff000], [], @empty}}]}, 0x28}}, 0x0) 17:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe4ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) 17:28:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x58], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xf0], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x300) [ 1992.654272][ C1] net_ratelimit: 14 callbacks suppressed [ 1992.654280][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1992.665799][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xffffff7f], [], @empty}}]}, 0x28}}, 0x0) 17:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe5660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:02 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x300], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:28:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x7ff, 0x4, {0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x500) 17:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe6660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x543], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xffffff9e], [], @empty}}]}, 0x28}}, 0x0) 17:28:03 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) recvmsg(0xffffffffffffff9c, &(0x7f0000000540)={&(0x7f00000001c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/67, 0x43}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/205, 0xcd}], 0x3, &(0x7f00000004c0)=""/111, 0x6f}, 0x101) sendmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f0000000600)={&(0x7f00000005c0)=@can={{0x2, 0x487327b3, 0x9647, 0x4}, 0x4, 0x1, 0x0, 0x0, "36f9171ad770e4cc"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000680)={0xb25, 0x0, 0x1f, 'queue1\x00', 0x7f}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) close(r4) [ 1993.374289][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.380206][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:28:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x600) 17:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe7660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x600], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1993.534330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.534373][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.540182][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.551797][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.557665][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:28:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xfffffff0], [], @empty}}]}, 0x28}}, 0x0) 17:28:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) [ 1993.601029][ T2689] validate_nla: 8 callbacks suppressed [ 1993.601040][ T2689] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) close(r4) 17:28:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x608], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe8660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x700) 17:28:03 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1fffffe, 0x7ff, 0x1, {0x4, @sliced={0x8, [0x9, 0x7, 0xffffffff, 0x10001, 0x2, 0xb431, 0x200, 0x100, 0x100, 0x0, 0x0, 0x5, 0xfffffffffffffffb, 0x5, 0xff, 0x1bf7, 0x0, 0x7f, 0x3ff, 0x39d, 0x80000000, 0x4, 0x7, 0x1, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffa, 0x0, 0xcfc4, 0x8, 0x1, 0x0, 0x2, 0x1000000000000000, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x7, 0x8, 0x63, 0x6, 0x3, 0x6, 0x9, 0x6], 0x5}}}) [ 1993.933133][ T2715] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x3000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:03 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x689], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703]}) close(r4) 17:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe9660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:03 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40202, 0x100) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0x2, 0x17868d41, {0x54, 0x2, 0x7, {0xc16f, 0x8}, {0xfff, 0x6}, @rumble={0x9, 0x6}}, {0x0, 0x7fffffff, 0xa7, {0xead, 0x7}, {0x20, 0x1}, @rumble={0x7, 0x4}}}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x2c, @local, 0x4e20, 0x1, 'nq\x00', 0x8, 0x7fff, 0x3b}, 0x2c) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000001c0)) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000280)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 17:28:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x40030000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xb54) 17:28:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x700], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1994.286833][ T2733] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:04 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) socket$inet_sctp(0x2, 0x1, 0x84) 17:28:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf0ffffffffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) close(r4) 17:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xea660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x806], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x4000) 17:28:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000180)={r1, 0x3}) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x100000, 0xffffffffffffffff, 0xffffffffffffff00, 0x4, 0x36d2, 0x2, 0xffffffffffffffe1, 0x3, 0x6}, 0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) [ 1994.602330][ T2760] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xd00], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1994.734278][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xeb660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) close(r4) 17:28:04 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x100000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1994.965411][ T2777] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:04 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x540b) 17:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xec660100], [], @empty}}]}, 0x28}}, 0x0) 17:28:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x200000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) close(r4) 17:28:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x2800], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xff00) 17:28:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1995.361921][ T2805] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:05 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x300000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf0ffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) close(r4) 17:28:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x4000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x7, 0x3, 0x4, {0x1, @pix={0x1, 0x0, 0x43777579, 0x7, 0x54, 0x14dff8eb, 0x9, 0x8, 0x1, 0x7, 0x1, 0x1}}}) 17:28:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x1000000) 17:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x400000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 1995.691408][ T2825] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x4305], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xfdffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) close(r4) 17:28:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x2000000) 17:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x500000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:05 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40000) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x2e96a82f8d42ed20, 0xfffffffffffffffe, [0x7, 0x1, 0xb, 0x8, 0x4, 0x0, 0x100000000]}) [ 1995.972324][ T2845] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:05 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x4788], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xfeffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x600000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x3000000) [ 1996.246829][ T2863] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x4888], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) 17:28:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xfffff000], [], @empty}}]}, 0x28}}, 0x0) 17:28:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) close(r4) 17:28:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x4000000) 17:28:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x5800], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:06 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000fef000/0xf000)=nil, 0xf000}, 0x1}) read(r0, &(0x7f00000001c0)=""/56, 0x38) [ 1996.593774][ T2885] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x900000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) close(r4) 17:28:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xffffff7f], [], @empty}}]}, 0x28}}, 0x0) 17:28:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x6488], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:06 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8000, 0x123400) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000180)={0x4, 0x0, [{0xc0000000, 0x397c3946, 0x2, 0x1000, 0xffff, 0x3, 0x5}, {0x4, 0x8, 0x1, 0x9, 0x7, 0x15bc000000000000, 0x9}, {0x7, 0x9, 0x2, 0x2, 0x4, 0x6, 0x6}, {0x0, 0xfffffffffffffffe, 0x7, 0x8, 0x8, 0x1, 0x1a91}]}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) sync() ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x5000000) 17:28:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xa00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xffffff97], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x800e], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) close(r4) 17:28:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) mlockall(0xfffffffffffffffb) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0xffff, 0x4, {0x1, @pix={0x8, 0x100000001, 0x77737b5f, 0x2, 0x7f, 0x3ff, 0x0, 0x1f, 0x1, 0x0, 0x0, 0x6}}}) 17:28:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x6000000) 17:28:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xb00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xffffff9e], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8035], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xffffffe4], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) 17:28:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) close(r4) 17:28:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x7000000) 17:28:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8100], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1997.694279][ C1] net_ratelimit: 13 callbacks suppressed [ 1997.694288][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1997.694314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1997.700227][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1997.706075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1997.711875][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1997.729061][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xfffffff0], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x8000) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 17:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xfffffffd], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8847], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1100000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) close(r4) 17:28:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x8000000) 17:28:07 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x5, "2ddf640925b8d8247081bde21d971d7af90ae2fb2f2a004a54271c13c5272de5", 0x3, 0x400, 0x2, 0x0, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x0, 0x101, 0x7, {0x1d, 0x6, 0x1, 0xfff}}) 17:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xfffffffe], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1200000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8848], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x1000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xb540000) 17:28:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) close(r4) 17:28:08 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80000, 0x0) fsmount(r0, 0x1, 0x87) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1300000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8864], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6087ffffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x5, 0x5d, 0x100b, 0x6, 0xf, 0x2, 0x1, 0x1}}) 17:28:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x1400000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8906], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x40000000) 17:28:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7030000]}) close(r4) 17:28:08 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000300)={0x3, 0x1f6, 0x7fff, 0x8000, 0x6982b5e9, 0x0, 0x54c6}, 0xc) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r0, 0x0, 0xe9, &(0x7f0000000440)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b2\xa7u\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe8\xc6\x1f\xf2/\xf6\x1f\x85\"<\x84\x97\x91\xfe\xeb\x1dCO\xe3\x9eT\x12/\xce\xca\x8d\xcf\t\xc6\xcb\rG\x06\xc0\x927\xfc\xf0HlN@~\x80G\xcb\xe5\xc6\xac5\xcd\xd2\x13\xe8\x02\x90\x83\xfa\xf4\xae\xf0+\xa0x\xf5\x95\xe5@\x92\x01\xb4\xcd?\x1au\xb9\x9b\xbdo\x94\xa2\n32\xf0\xd6\f\xcfT\xa0-^\xdd\x84!U&\x05|I'}, 0x30) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000540)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0xfd9b, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x7, 0x4}, 0x0, 0x0, &(0x7f0000000600)={0x1, 0x1, 0x4d, 0x10001}, &(0x7f0000000640)=0x100000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c80)={0x4, 0x0, [{0x11f000, 0xf7, &(0x7f0000000900)=""/247}, {0x16000, 0x0, 0x0}, {0x104006, 0xdf, &(0x7f0000000ac0)=""/223}, {0x1000, 0x88, &(0x7f0000000bc0)=""/136}]}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r3, 0x0, 0x0, 0x0, r5}, 0x30) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b2\xa7u\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe8\xc6\x1f\xf2/\xf6\x1f\x85\"<\x84\x97\x91\xfe\xeb\x1dCO\xe3\x9eT\x12/\xce\xca\x8d\xcf\t\xc6\xcb\rG\x06\xc0\x927\xfc\xf0HlN@~\x80G\xcb\xe5\xc6\xac5\xcd\xd2\x13\xe8\x02\x90\x83\xfa\xf4\xae\xf0+\xa0x\xf5\x95\xe5@\x92\x01\xb4\xcd?\x1au\xb9\x9b\xbdo\x94\xa2\n32\xf0\xd6\f\xcfT\xa0-^\xdd\x84!U&\x05|I', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0xffffffffffffff14}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000000)) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) bind$ax25(r7, &(0x7f0000000880)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x6}, &(0x7f00000007c0)=0x8) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r9 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2f, 'pids'}, {0x2f, 'io'}, {0x2d, 'rdma'}, {0x2f, 'io'}, {0x2f, 'memory'}, {0x2f, 'io'}, {0x2d, 'rdma'}]}, 0x2e) [ 1998.774445][ T3030] validate_nla: 7 callbacks suppressed [ 1998.774456][ T3030] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1998.894263][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1998.900155][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:28:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x4000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x1000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xf000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xfdfdffff) [ 1999.141668][ T3054] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xf0ffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) close(r4) 17:28:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x6329000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:09 executing program 4: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x3000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xff000000) 17:28:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x1000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x9effffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) close(r4) [ 1999.570371][ T3082] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 1999.614318][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1999.620155][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:28:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x40030000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x2000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xfffffdfd) 17:28:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xf0ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000040)=0x78) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x70, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) close(r4) [ 1999.885894][ T3106] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xffffff7f00000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf0ffffffffffff], [], @empty}}]}, 0x28}}, 0x0) 17:28:09 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x3000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:09 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x2000) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000340)=""/4096) 17:28:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x100000000000000) 17:28:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0xfffffffffffff000], [], @empty}}]}, 0x28}}, 0x0) [ 2000.136587][ T3130] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x4000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) close(r4) 17:28:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x5, {0x2000000000000001, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x50}}, 0x8001) 17:28:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x100000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x200000000000000) 17:28:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x2], [], @empty}}]}, 0x28}}, 0x0) 17:28:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x6000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2000.445020][ T3159] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x200000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) close(r4) 17:28:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x7000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x300000000000000) 17:28:10 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x6, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) [ 2000.878824][ T3187] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x300000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x3], [], @empty}}]}, 0x28}}, 0x0) 17:28:10 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) close(r4) 17:28:10 executing program 4: r0 = eventfd(0x3) signalfd(r0, &(0x7f0000000000)={0xe0}, 0x8) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x400000000000000) [ 2001.214244][ T3208] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x4], [], @empty}}]}, 0x28}}, 0x0) 17:28:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000240)={0x20, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x2, 0x0, [], {0x0, @bt={0x6, 0x8, 0x1, 0x1, 0x401, 0x1000, 0xffff, 0x3ff, 0x6, 0x0, 0xff, 0xf9, 0x20, 0xd4, 0x8, 0x13}}}) 17:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x400000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8060000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) close(r4) 17:28:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x500000000000000) 17:28:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, 0x12, 0x300, 0x70bd29, 0x25dfdbfe, {0x15}, [@generic="309f0dcaa9d38ac35f00f00be06924d9c48e857b7b0620b6af95d09ec82b8cf12da413b9200cd9c8013c82c4caf48399aa8ccff30710eecd91e38b5b8734b0286998dc97ed8f60dcd20d4ac5382433fc9a0217173fbb14e97225d146a661b1b1a72ed805248d9b90953221e0b9a3884b9157f41c4d5f253271f685ae21421ce869d4e27863c45cd52f30e075732be97f7f3e953ce7b5f2cd5a163ee27a5ffb7de43b1f2d795faa3f2c499ca2abd4639134", @nested={0x30, 0x70, [@typed={0x8, 0x1e, @str='&\x00'}, @generic="e7826e1dbff9c29fcb8f", @typed={0x8, 0x31, @fd=r0}, @typed={0x8, 0x23, @ipv4=@empty}, @typed={0x8, 0x8d, @u32=0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) 17:28:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x5], [], @empty}}]}, 0x28}}, 0x0) [ 2001.529136][ T3243] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xd000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x500000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) close(r4) 17:28:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x600000000000000) 17:28:11 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) setpriority(0x2, r1, 0x5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000040)={0x8}) getpid() r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) write$ppp(r2, &(0x7f0000000200)="7b0f0e5e5505eeca682b150f03b087ca9443237745a25922a667f4d35175c8876ddf883731c68c3a4bf467b8a0b7b727f6d096ababd78c6f0ddc2fc794dc2ca9fce6893b29b34ba1044cf677623135e6f016a5f0685d10873c6ab2959025937816269d84c42adecab4a672ac299515de0c74a41bfa623ab9ed54156d658f775eb0840aeec69e33ddc8f2ef3cc8674988c8272fae9b25662eb575fb82421098c1877169e8eee6349763c8a724a9704d67e5b5f8c67950aa68bc06803337e14f2b900de218f85d7f3fef80eb0082df9f4658fa730098657089152cf9186e69c09a53f00655a8", 0xe5) get_thread_area(&(0x7f0000000180)={0x2, 0x0, 0x2000, 0x8001, 0x5d7, 0x6, 0x4, 0x100000000, 0xfffffffffffffff7, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x28000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x6], [], @empty}}]}, 0x28}}, 0x0) [ 2001.917452][ T3269] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x600000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:11 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x40000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x700000000000000) 17:28:12 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) 17:28:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) close(r4) 17:28:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x43050000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x700000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x8], [], @empty}}]}, 0x28}}, 0x0) 17:28:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x801, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x3f, 0x30314752, 0x6, 0x1ff, 0x2, @stepwise={{0x4, 0x6c2}, {0x4, 0x100000000}, {0x3, 0x9}}}) 17:28:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x58000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) close(r4) 17:28:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x800000000000000) 17:28:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x9], [], @empty}}]}, 0x28}}, 0x0) 17:28:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x1) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x800e0000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xa00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xb54000000000000) 17:28:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) close(r4) 17:28:12 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x80350000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:12 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe00000000000000], [], @empty}}]}, 0x28}}, 0x0) [ 2003.054288][ C1] net_ratelimit: 16 callbacks suppressed [ 2003.054296][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.065853][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:28:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0xa], [], @empty}}]}, 0x28}}, 0x0) 17:28:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x81000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x4000000000000000) 17:28:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 17:28:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x86ddffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xf00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) close(r4) 17:28:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0xb], [], @empty}}]}, 0x28}}, 0x0) 17:28:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xfdfdffff00000000) 17:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x1f00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:13 executing program 4: mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x88470000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2003.774335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.780272][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2003.821895][ T3401] validate_nla: 6 callbacks suppressed [ 2003.821906][ T3401] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0xf], [], @empty}}]}, 0x28}}, 0x0) 17:28:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x88480000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0xff00000000000000) 17:28:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe703000000000000]}) close(r4) [ 2003.934276][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.934282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.934337][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2003.940133][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2003.957466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.963269][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:28:13 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cachefiles\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000009c0)={0x8, [0x6, 0xfffffffffffffffe, 0x0, 0x6, 0x4, 0x40, 0x7, 0x8dd]}, &(0x7f0000000a00)=0x14) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x2000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x88640000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) close(r4) 17:28:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x10], [], @empty}}]}, 0x28}}, 0x0) 17:28:14 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x800, 0x4, {0x8000000005, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) [ 2004.263300][ T3427] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x40000) openat$cgroup_type(r2, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r3 = shmget$private(0x0, 0x2000, 0x54000220, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000000c0)=""/145) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x88a8ffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x260f000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) close(r4) 17:28:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x11], [], @empty}}]}, 0x28}}, 0x0) [ 2004.606850][ T3454] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x88caffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:14 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$cgroup_type(r0, 0x0, 0x199) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x2803) ioctl$TCXONC(r2, 0x540a, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x181, 0x0) write(r2, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCFLSH(r2, 0x540b, 0xfffffffffffffffb) 17:28:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x100000000, 0x7ff, 0x4, {0x1, @raw_data="ec2a34bf1079b7a1b55dcb980e40a8161e0102a2d2d0a2fcbcf6327eff36686928792c644acb80c08355a7c267aa846c48baad3364eefbb0ed7ae9074f4a61bc55ef6cc6068ea95ef008243c706486daeb36769822ee7202d26d43987c9e59c5b574eed127be9daf09c7406e4bddb2a132ac1ebcef51792a3916c9d5d9e8b50dec8a98e807d5dafbc551606856c57b0d21a3d8a06b10935e29b5dfff1bbba9c52c740e96842b5a49fdf384d867429108fc0301121ac57fd6637deef973242ed110f34140a23faf2a"}}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fffffff, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000180)) recvfrom$llc(r1, &(0x7f0000000240)=""/157, 0x9d, 0x1, &(0x7f0000000300)={0x1a, 0x336, 0xfffffffffffff801, 0x7, 0x8, 0x1, @local}, 0x10) 17:28:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x3f00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:14 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x89060000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2004.933897][ T3469] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x12], [], @empty}}]}, 0x28}}, 0x0) 17:28:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x82c, 0x8a000) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x1) 17:28:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) close(r4) 17:28:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x8dffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e22, 0x4, @loopback, 0xae}, {0xa, 0x4e22, 0xcec5, @mcast2, 0x3}, 0x0, [0x3, 0x10000, 0x4, 0x101, 0x0, 0x1f, 0xa18, 0xffffffff00000001]}, 0x5c) write(r1, &(0x7f0000000080)='z', 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x200800, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000300)={'ipddp0\x00', {0x2, 0x4e21, @empty}}) 17:28:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000180)=0xc) [ 2005.285584][ T3490] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x13], [], @empty}}]}, 0x28}}, 0x0) 17:28:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xf5ffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) close(r4) 17:28:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2, 0x7ff, 0x4, {0x200000001, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) epoll_create(0x1) [ 2005.637172][ T3505] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x14], [], @empty}}]}, 0x28}}, 0x0) 17:28:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xffffa888], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x4c00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xffe00000, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000140)={0x1, [0x0]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x2803) r3 = socket$isdn(0x22, 0x3, 0x24) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000000c0)=@buf={0x1b, &(0x7f0000000000)="7685277bb7803e261dea7179177b55a3ea1bda342b4b7850f44cfb"}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000080)='z', 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x200101, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x71}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r5, 0x1000, "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"}, &(0x7f0000001280)=0x1008) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) close(r4) 17:28:15 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="4de5b18b612da83943949e283e6fb6fd13558b8252b16df240cfb1d7e6954e72a45fcb492576ac68f9845def60b47497e5a11dd63083dbb5dee24ce6c6d466af0b29df2a0ead2fe4023223d5ed06a16dfa72c4cb8d6fa6d64b42c36d166e1c5a63f1654614c0", 0x8) 17:28:15 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xffffca88], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2006.026028][ T3532] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6000000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0xf0], [], @empty}}]}, 0x28}}, 0x0) 17:28:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) close(r4) 17:28:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xffffffffffffffff) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:16 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7d0, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x80000000000007ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x20440, 0x4) 17:28:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xffffdd86], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2006.255387][ T3551] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x300], [], @empty}}]}, 0x28}}, 0x0) 17:28:16 executing program 4: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x8000) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6800000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) close(r4) 17:28:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f00000000c0)="7170124274974b40ff910ca942508eaeec99768a8ed585e5fb0000000000d0bc3291f451b6d5c196be68d2da6dfed8b92c07", 0x32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xfffff000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x500], [], @empty}}]}, 0x28}}, 0x0) [ 2006.549933][ T3571] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x6c00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:16 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x80000000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 17:28:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xffffff8d], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x600], [], @empty}}]}, 0x28}}, 0x0) 17:28:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x101, 0x1f}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) write(r1, &(0x7f0000000080)='z', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x28102, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) close(r4) [ 2006.938475][ T3596] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 17:28:16 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xfffffff5], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:16 executing program 4: syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x10000, 0x200000) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xc14178c5e3652268, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000002c0)) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000280)={0x0, 0x7}, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3ff, 0x467, 0x2, {0x0, @pix_mp={0xc31d, 0x4, 0x0, 0x4, 0x7, [{0x6, 0x9}, {0x4, 0x4}, {}, {0x7, 0x1}, {0x80, 0x7}, {0x4, 0x3}, {0xe21}, {0x1ff, 0x9}], 0x2, 0x8, 0x7, 0x1, 0x5}}}) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) r3 = geteuid() setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000800)={0x6}, 0x1) write$selinux_create(0xffffffffffffff9c, &(0x7f0000000840)=@access={'system_u:object_r:tmpfs_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x5}, 0x60) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f00000007c0)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000380)={0xd0, 0x36, 0x808, 0x70bd29, 0x25dfdbfc, "", [@generic="59e51b3bb38dd11960c394694fe83b3205ad32979c41e6c56a8b868901dee3e27110773d6e3a2b258d4d8627cf299156286855feb1dfecccaf1166ca4dda8127076382f4bef734", @generic="82bb2572cfea5ad49627ac66a01c40777663ee675ed1f87c7891c80ca735601510cb840a50cfb52e9c69c21db8e5f79a469915a9d88329361b720b55ef4eb10ead259d1b80f2bd6af278a7e4435377f4f4cdaac96f3341768a07ffddcbc8554a6648ecf13a2e2d8e9a569ffbc7", @typed={0xc, 0x38, @str='ppp1.\x00'}]}, 0xd0}], 0x1, &(0x7f0000000700)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0x88, 0x4000084}, 0x800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7400000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x900], [], @empty}}]}, 0x28}}, 0x0) 17:28:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) close(r4) 17:28:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0xf0ffffffffffff], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f00000000c0)="07d74f076dacba1ec3a942d488d9fdd4028be22a2afa2e8adcfd77f1ec7d539c8bf8e96affd1d6ca98a006f29e982a7992e9eeae4080355684f77ee5ce07d461e561fdacfa6310902b458f8bcfe983af316ef35eac68d685899cfd8bbbd12c52fb910b551908b91dc8c1b655a977573faf4b281fad1cde952036beaac7eb3a6c7524a372ab77180b6013d54ec4502a0535b3ef28290bbb4a47153ee61d49f9dbd4545819b9b002c9e80d7a17838ecde585ad3af77de24d8efc5bca622182b89910ef689f3738f3b059ab813b15207394ec0cbb7f430a8e3445adb858df4e802c3ab3c8ad934e2618187faf144bebd2320000000000", 0xf5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:17 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0xffffffffffffffff, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0xa00], [], @empty}}]}, 0x28}}, 0x0) 17:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x7a00000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x100000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7]}) close(r4) 17:28:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x181080, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff28}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}) 17:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x97ffffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x200000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0xb00], [], @empty}}]}, 0x28}}, 0x0) 17:28:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) r2 = socket(0x19, 0x800, 0x1000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/62) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f00000001c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0xa, 0x100000001, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000140)={0x4, 0x2, 0x73, 0x8, 0x8001}) r4 = getpgrp(0xffffffffffffffff) r5 = getpid() pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000000c0)={r6, r1, 0x80000000}) 17:28:17 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x7ff, 0x1, {0x1, @raw_data="d11ba0334dd7305a6e01969a1069945b82d2d9920b13b4f23d78093a484437e597ce8fb1ccdfbee6d0c777b976ec7d102837768702c90ccd5dab572207e46f46bddf8e29b1df291361b1fab2dec8c89e079b44102da790ef7e360a31da5b7dda4eb4e3097bf86b0460763f285905c584948fa1f0f4d2fca20e339021a15d3cba3d37608169e20b4bf5c0b33fbcff433f84f4296e4365a714c76401c5110e45c9a221a5b82f443d276b89cb9366fff74b751579934d24d97167863bd7e1e2681af87265732bfb685f"}}) 17:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0x9effffff00000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:17 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x300000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) close(r4) 17:28:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0xf00], [], @empty}}]}, 0x28}}, 0x0) [ 2008.094300][ C1] net_ratelimit: 14 callbacks suppressed [ 2008.094309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2008.094326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2008.100184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2008.105992][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2008.111792][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2008.128956][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:28:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x400000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xce09000000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x16, @ipv6=@ipv4={[0x5b00, 0x0, 0x1100], [], @empty}}]}, 0x28}}, 0x0) 17:28:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2803) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000080)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:28:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) close(r4) 17:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x5b00, 0x0, 0x0, 0xe166010000000000], [], @empty}}]}, 0x28}}, 0x0) 17:28:18 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="abd53b0b72c9", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0x2b, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x600000000000000], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2009.294268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2009.300126][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2010.014330][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2010.020236][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2013.454280][ C1] net_ratelimit: 16 callbacks suppressed [ 2013.459988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2013.465775][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2014.174310][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2014.180135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2014.334306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2014.334353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2014.340247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2014.352688][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2014.358484][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2015.534303][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.073837][ T1770] ================================================================== [ 2018.082603][ T1770] BUG: KASAN: slab-out-of-bounds in page_get_anon_vma+0x24b/0x4b0 [ 2018.090398][ T1770] Read of size 4 at addr ffff88809a16bc90 by task kswapd0/1770 [ 2018.097916][ T1770] [ 2018.100239][ T1770] CPU: 0 PID: 1770 Comm: kswapd0 Not tainted 5.2.0-rc6+ #34 [ 2018.107497][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2018.117536][ T1770] Call Trace: [ 2018.120841][ T1770] dump_stack+0x172/0x1f0 [ 2018.125154][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.130251][ T1770] print_address_description.cold+0x7c/0x20d [ 2018.136263][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.141357][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.146453][ T1770] __kasan_report.cold+0x1b/0x40 [ 2018.151374][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.156469][ T1770] kasan_report+0x12/0x20 [ 2018.160779][ T1770] check_memory_region+0x123/0x190 [ 2018.165871][ T1770] kasan_check_read+0x11/0x20 [ 2018.170524][ T1770] page_get_anon_vma+0x24b/0x4b0 [ 2018.175450][ T1770] ? page_lock_anon_vma_read+0x6b0/0x6b0 [ 2018.181063][ T1770] ? kasan_check_write+0x14/0x20 [ 2018.186013][ T1770] split_huge_page_to_list+0x577/0x2f70 [ 2018.191558][ T1770] ? can_split_huge_page+0x490/0x490 [ 2018.196829][ T1770] deferred_split_scan+0x64b/0xa60 [ 2018.201939][ T1770] ? split_huge_page_to_list+0x2f70/0x2f70 [ 2018.207733][ T1770] do_shrink_slab+0x3f6/0xa70 [ 2018.212397][ T1770] shrink_slab+0x4be/0x5e0 [ 2018.216805][ T1770] ? unregister_memcg_shrinker.isra.0+0x50/0x50 [ 2018.223032][ T1770] shrink_node+0x612/0x1680 [ 2018.227540][ T1770] ? shrink_node_memcg+0x1430/0x1430 [ 2018.232807][ T1770] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2018.239029][ T1770] ? pgdat_balanced+0x13a/0x180 [ 2018.243865][ T1770] balance_pgdat+0x56c/0xe80 [ 2018.248447][ T1770] ? trace_hardirqs_on+0x67/0x220 [ 2018.253458][ T1770] ? mem_cgroup_shrink_node+0x6e0/0x6e0 [ 2018.259000][ T1770] ? kasan_check_write+0x14/0x20 [ 2018.263926][ T1770] ? finish_task_switch+0x1f0/0x730 [ 2018.269122][ T1770] kswapd+0x5f4/0xfc0 [ 2018.273088][ T1770] ? balance_pgdat+0xe80/0xe80 [ 2018.277839][ T1770] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2018.283102][ T1770] ? trace_hardirqs_on+0x67/0x220 [ 2018.288155][ T1770] ? finish_wait+0x260/0x260 [ 2018.292729][ T1770] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2018.298521][ T1770] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2018.304750][ T1770] ? __kthread_parkme+0xfb/0x1b0 [ 2018.309710][ T1770] kthread+0x354/0x420 [ 2018.313763][ T1770] ? balance_pgdat+0xe80/0xe80 [ 2018.318508][ T1770] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2018.324735][ T1770] ret_from_fork+0x24/0x30 [ 2018.329148][ T1770] [ 2018.331458][ T1770] Allocated by task 9927: [ 2018.335807][ T1770] save_stack+0x23/0x90 [ 2018.339948][ T1770] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2018.345582][ T1770] kasan_kmalloc+0x9/0x10 [ 2018.349893][ T1770] __kmalloc+0x15c/0x740 [ 2018.354119][ T1770] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2018.359727][ T1770] tomoyo_path_perm+0x230/0x430 [ 2018.364559][ T1770] tomoyo_inode_getattr+0x1d/0x30 [ 2018.369615][ T1770] security_inode_getattr+0xf2/0x150 [ 2018.374889][ T1770] vfs_getattr+0x25/0x70 [ 2018.379111][ T1770] vfs_statx+0x157/0x200 [ 2018.383335][ T1770] __do_sys_newlstat+0xa4/0x130 [ 2018.388185][ T1770] __x64_sys_newlstat+0x54/0x80 [ 2018.393019][ T1770] do_syscall_64+0xfd/0x680 [ 2018.397507][ T1770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2018.403373][ T1770] [ 2018.405696][ T1770] Freed by task 9927: [ 2018.409661][ T1770] save_stack+0x23/0x90 [ 2018.413890][ T1770] __kasan_slab_free+0x102/0x150 [ 2018.418806][ T1770] kasan_slab_free+0xe/0x10 [ 2018.423287][ T1770] kfree+0xcf/0x220 [ 2018.427075][ T1770] tomoyo_realpath_from_path+0x1de/0x7a0 [ 2018.432685][ T1770] tomoyo_path_perm+0x230/0x430 [ 2018.437516][ T1770] tomoyo_inode_getattr+0x1d/0x30 [ 2018.442541][ T1770] security_inode_getattr+0xf2/0x150 [ 2018.447821][ T1770] vfs_getattr+0x25/0x70 [ 2018.452217][ T1770] vfs_statx+0x157/0x200 [ 2018.456465][ T1770] __do_sys_newlstat+0xa4/0x130 [ 2018.461301][ T1770] __x64_sys_newlstat+0x54/0x80 [ 2018.466134][ T1770] do_syscall_64+0xfd/0x680 [ 2018.470619][ T1770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2018.476486][ T1770] [ 2018.478794][ T1770] The buggy address belongs to the object at ffff88809a16a680 [ 2018.478794][ T1770] which belongs to the cache kmalloc-4k of size 4096 [ 2018.492832][ T1770] The buggy address is located 1552 bytes to the right of [ 2018.492832][ T1770] 4096-byte region [ffff88809a16a680, ffff88809a16b680) [ 2018.506813][ T1770] The buggy address belongs to the page: [ 2018.512505][ T1770] page:ffffea0002685a80 refcount:1 mapcount:0 mapping:ffff8880aa400dc0 index:0x0 compound_mapcount: 0 [ 2018.523460][ T1770] flags: 0x1fffc0000010200(slab|head) [ 2018.528857][ T1770] raw: 01fffc0000010200 ffffea00012a5408 ffffea0002a43508 ffff8880aa400dc0 [ 2018.537432][ T1770] raw: 0000000000000000 ffff88809a16a680 0000000100000001 0000000000000000 [ 2018.545996][ T1770] page dumped because: kasan: bad access detected [ 2018.552479][ T1770] [ 2018.554792][ T1770] Memory state around the buggy address: [ 2018.560498][ T1770] ffff88809a16bb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2018.568547][ T1770] ffff88809a16bc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2018.576595][ T1770] >ffff88809a16bc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2018.584653][ T1770] ^ [ 2018.589338][ T1770] ffff88809a16bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2018.597376][ T1770] ffff88809a16bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2018.605411][ T1770] ================================================================== [ 2018.613571][ T1770] Disabling lock debugging due to kernel taint [ 2018.620150][ C0] net_ratelimit: 11 callbacks suppressed [ 2018.620157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.624256][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.625878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2018.631552][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2018.637395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.643081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.648791][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2018.654496][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2018.662294][ T1770] Kernel panic - not syncing: panic_on_warn set ... [ 2018.678172][ T1770] CPU: 0 PID: 1770 Comm: kswapd0 Tainted: G B 5.2.0-rc6+ #34 [ 2018.686826][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2018.696859][ T1770] Call Trace: [ 2018.700146][ T1770] dump_stack+0x172/0x1f0 [ 2018.704947][ T1770] panic+0x2cb/0x744 [ 2018.715436][ T1770] ? __warn_printk+0xf3/0xf3 [ 2018.720007][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.725132][ T1770] ? preempt_schedule+0x4b/0x60 [ 2018.729981][ T1770] ? ___preempt_schedule+0x16/0x18 [ 2018.735100][ T1770] ? trace_hardirqs_on+0x5e/0x220 [ 2018.740105][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.745194][ T1770] end_report+0x47/0x4f [ 2018.749332][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.754421][ T1770] __kasan_report.cold+0xe/0x40 [ 2018.759252][ T1770] ? page_get_anon_vma+0x24b/0x4b0 [ 2018.764366][ T1770] kasan_report+0x12/0x20 [ 2018.768696][ T1770] check_memory_region+0x123/0x190 [ 2018.773818][ T1770] kasan_check_read+0x11/0x20 [ 2018.778477][ T1770] page_get_anon_vma+0x24b/0x4b0 [ 2018.783429][ T1770] ? page_lock_anon_vma_read+0x6b0/0x6b0 [ 2018.789042][ T1770] ? kasan_check_write+0x14/0x20 [ 2018.794010][ T1770] split_huge_page_to_list+0x577/0x2f70 [ 2018.799539][ T1770] ? can_split_huge_page+0x490/0x490 [ 2018.804806][ T1770] deferred_split_scan+0x64b/0xa60 [ 2018.809923][ T1770] ? split_huge_page_to_list+0x2f70/0x2f70 [ 2018.815714][ T1770] do_shrink_slab+0x3f6/0xa70 [ 2018.820371][ T1770] shrink_slab+0x4be/0x5e0 [ 2018.824774][ T1770] ? unregister_memcg_shrinker.isra.0+0x50/0x50 [ 2018.830999][ T1770] shrink_node+0x612/0x1680 [ 2018.835496][ T1770] ? shrink_node_memcg+0x1430/0x1430 [ 2018.840761][ T1770] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2018.846989][ T1770] ? pgdat_balanced+0x13a/0x180 [ 2018.851833][ T1770] balance_pgdat+0x56c/0xe80 [ 2018.856422][ T1770] ? trace_hardirqs_on+0x67/0x220 [ 2018.861430][ T1770] ? mem_cgroup_shrink_node+0x6e0/0x6e0 [ 2018.866972][ T1770] ? kasan_check_write+0x14/0x20 [ 2018.871900][ T1770] ? finish_task_switch+0x1f0/0x730 [ 2018.877082][ T1770] kswapd+0x5f4/0xfc0 [ 2018.881045][ T1770] ? balance_pgdat+0xe80/0xe80 [ 2018.885788][ T1770] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2018.891074][ T1770] ? trace_hardirqs_on+0x67/0x220 [ 2018.896083][ T1770] ? finish_wait+0x260/0x260 [ 2018.900666][ T1770] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2018.906456][ T1770] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2018.912676][ T1770] ? __kthread_parkme+0xfb/0x1b0 [ 2018.917588][ T1770] kthread+0x354/0x420 [ 2018.921638][ T1770] ? balance_pgdat+0xe80/0xe80 [ 2018.926378][ T1770] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2018.932597][ T1770] ret_from_fork+0x24/0x30 [ 2018.938246][ T1770] Kernel Offset: disabled [ 2018.942595][ T1770] Rebooting in 86400 seconds..