, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x4000000000000000)

[  656.437470] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:21 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x17b, 0x0)

22:17:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000180))

22:17:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x4800000000000000)

[  656.710635] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:21 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x802, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000f3, 0x0)

22:17:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x10000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:21 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x17c, 0x0)

22:17:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x4c00000000000000)

22:17:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000180))

[  657.104508] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x20000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:22 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x17d, 0x0)

22:17:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x6800000000000000)

[  657.246705] device team0 entered promiscuous mode
[  657.251711] device team_slave_0 entered promiscuous mode
[  657.328852] device team_slave_1 entered promiscuous mode
22:17:22 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000180))

22:17:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x6c00000000000000)

[  657.531250] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:22 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x17e, 0x0)

22:17:23 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_dccp_buf(r1, 0x21, 0x8c, &(0x7f0000000000)="e11ca1b594287efcc058f21f20e004", 0xf)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'yam0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000140)=""/48, 0x30}], 0x1)
ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000000c0))
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:23 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x2)

22:17:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3f000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x6cefff7f00000000)

22:17:23 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x17f, 0x0)

22:17:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000f4, 0x0)

22:17:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x40000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:23 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x180, 0x0)

22:17:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x7400000000000000)

22:17:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x48000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:23 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x181, 0x0)

22:17:23 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3)

22:17:23 executing program 0:
r0 = socket$inet6(0xa, 0x80000, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x7a00000000000000)

22:17:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4a000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:23 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x182, 0x0)

22:17:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000f5, 0x0)

22:17:23 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x4)

[  659.154021] validate_nla: 4 callbacks suppressed
[  659.154032] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:24 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:24 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x183, 0x0)

22:17:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:24 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r1)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x1e86)
sendfile(r3, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  659.423528] print_req_error: 355 callbacks suppressed
[  659.423539] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.431561] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  659.435507] buffer_io_error: 354 callbacks suppressed
[  659.435517] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:24 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x184, 0x0)

22:17:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5)

22:17:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000f6, 0x0)

[  659.468778] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.475334] Buffer I/O error on dev loop0, logical block 0, async page read
[  659.552102] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.558698] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:24 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x42038, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}], [{@subj_user={'subj_user', 0x3d, '/dev/amidi#\x00'}}, {@audit='audit'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:24 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x185, 0x0)

[  659.603391] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.609979] Buffer I/O error on dev loop0, logical block 0, async page read
[  659.623262] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.629846] Buffer I/O error on dev loop0, logical block 0, async page read
[  659.638089] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.644630] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x60000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  659.677736] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.684279] Buffer I/O error on dev loop0, logical block 0, async page read
[  659.767566] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.774116] Buffer I/O error on dev loop0, logical block 0, async page read
[  659.796326] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  659.807661] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:17:24 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x186, 0x0)

[  659.814170] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x65580000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  659.843247] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  659.849817] Buffer I/O error on dev loop0, logical block 0, async page read
[  659.978957] mkiss: ax0: crc mode is auto.
[  660.092563] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  660.128075] mkiss: ax0: crc mode is auto.
22:17:25 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000100)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000f7, 0x0)

22:17:25 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x187, 0x0)

22:17:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x68000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6)

[  660.461157] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:25 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x188, 0x0)

22:17:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  660.776756] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:25 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x401, 0x80000)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x7004, 0x1000, 0x0, 0x29, 0xff, 0xf, 0x0, 0x0, 0x1, 0x4, 0x8000, 0x9}, {0x10000, 0x4, 0xb, 0x5, 0xfffffffffffffffc, 0x0, 0x9, 0xc9fe, 0xb68, 0x4, 0x8}, {0x2, 0x5000, 0xa, 0x2, 0xffffffff7fffffff, 0x7, 0x1, 0x86, 0x0, 0x8, 0x1bd, 0xd1e}, {0xd004, 0x10d002, 0xf, 0x9, 0xb2b, 0x1c55, 0xddda, 0x5, 0x7, 0x0, 0x1, 0x43b}, {0x2, 0x3004, 0x0, 0x3ff, 0x7, 0x1, 0x66e0, 0x0, 0x7, 0x800, 0x369c, 0x5e3}, {0x1, 0x7000, 0xb, 0xffff, 0x8, 0x3, 0x1020000, 0x4c55, 0x3f, 0x100, 0x8854309, 0x6}, {0x5000, 0x100000, 0xb, 0x7, 0x5, 0x3, 0x8, 0x7ff, 0x2, 0xbe2, 0x101, 0x500000}, {0x2002, 0x2000, 0x3, 0x4, 0x1, 0x7ff, 0x5, 0x3, 0x0, 0x3, 0x2, 0x2}, {0x100004, 0x103004}, {0x100000}, 0x0, 0x0, 0x2, 0x100000, 0xb, 0x2800, 0x2, [0x5, 0x0, 0x6, 0x1f]})
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
fsetxattr(r2, &(0x7f0000000000)=@random={'trusted.', '\x00'}, &(0x7f0000000040)='/dev/amidi#\x00', 0xc, 0x2)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r3, 0x2008000)
sendfile(r0, r3, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:25 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x189, 0x0)

22:17:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7)

22:17:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x74000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000f8, 0x0)

22:17:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
uname(&(0x7f00000000c0)=""/64)

22:17:26 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x18a, 0x0)

[  661.156876] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  661.239436] sp0: Synchronizing with TNC
22:17:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  661.416766] sp0: Synchronizing with TNC
22:17:26 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x18b, 0x0)

[  661.560271] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf)

22:17:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x81000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:26 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x91, 0x800)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:26 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x18c, 0x0)

22:17:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000f9, 0x0)

22:17:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x88a8ffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  662.175715] Bluetooth: Invalid header checksum
[  662.180393] Bluetooth: Invalid header checksum
22:17:27 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x18d, 0x0)

[  662.269232] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:27 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x10)

22:17:27 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x109000, 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000100))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$TCFLSH(r2, 0x540b, 0x0)
fcntl$setstatus(r1, 0x4, 0x800)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/4096}, {&(0x7f00000011c0)=""/12}, {&(0x7f0000001200)=""/247}, {&(0x7f0000001300)=""/68}, {&(0x7f00000013c0)=""/56}, {&(0x7f0000001400)=""/191}, {&(0x7f00000014c0)=""/197}], 0x18d6ae77c5d555b9, 0x0)

22:17:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x9effffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:27 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x18e, 0x0)

22:17:27 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1d)

[  662.756396] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:27 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x18f, 0x0)

22:17:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xb2080000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:28 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
symlinkat(&(0x7f0000000000)='./bus\x00', r1, &(0x7f0000000040)='./bus\x00')
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:28 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x80)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x8, 0x3, 0x3f, 0x92d9, 'syz1\x00', 0x10e})
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x4000, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={<r4=>0x0, 0x2}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={<r5=>r4, 0x79}, &(0x7f0000000280)=0x8)
syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x3, 0x40000)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r5, 0x1}, 0x8)
bind$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0xd}}}, 0x1e)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/61}, {&(0x7f0000000100)=""/31}], 0x2ac, 0x0)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540))

22:17:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fa, 0x0)

22:17:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:28 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x190, 0x0)

22:17:28 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x300)

22:17:28 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x600000, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7fffffff)
r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
keyctl$revoke(0x3, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/89, 0x59}], 0x8, 0x0)

22:17:28 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x191, 0x0)

22:17:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfeff0000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:28 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x500)

22:17:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x101243, 0x0)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100))
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xff0f0000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:28 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, {0x9, 0x2, 0x3, 0x10000, 0x3, 0x7}}, 0x8)
ftruncate(r2, 0x4)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:28 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x192, 0x0)

22:17:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffa888, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fb, 0x0)

22:17:28 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x600)

22:17:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffff000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:29 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x193, 0x0)

[  664.273655] validate_nla: 5 callbacks suppressed
[  664.273665] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  664.286832] Bluetooth: Invalid header checksum
[  664.291543] Bluetooth: Invalid header checksum
22:17:29 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8000, 0x101200)
r3 = accept$nfc_llcp(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x60)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x1ffd)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2)
ioctl$sock_ifreq(r3, 0x8934, &(0x7f0000000440)={'ip6tnl0\x00', @ifru_addrs=@hci={0x1f, <r5=>0x0, 0x1}})
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000480)={r5, 0xffff, 0x5, 0x58a, 0x3f, 0x1d, 0x7ff})
r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r6, 0x2008000)
sendfile(r1, r6, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000004c0)={'secuG_\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb3\x9e ~\x90^\x16_', 0xd1, "ab7f0051517c906cb03079c2f948017ce0fd8d594205a0bf7441a2f52ea47ac079c325c4b0ba9123786dae65f310a63970ba1f318be865328c97673b6909163e87de29fcecdab9196f6cf41f8e0799d88a6ce12b595bab2a2c0fdd28deb9f8bd902f6fbdae9dd52d199c88f8cb3d2e95343d236aad010103607ed8b1f9be9de6a133726b6aedb02e6c34bcae5b1a2a2464da93e6bbe74a809074ec035f5e6ee4fa72957d59a0d9044712658b55277103c3faae6328966b11c7a94f7672b075046f01acd701abf737afd2f32efed181470c"}, &(0x7f00000002c0)=0xf5)

22:17:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff7f, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:29 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x700)

22:17:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x2)

22:17:29 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x194, 0x0)

[  664.481232] print_req_error: 295 callbacks suppressed
[  664.481245] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.493197] buffer_io_error: 295 callbacks suppressed
[  664.493208] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.588946] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  664.612242] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.619243] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff9e, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  664.660495] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.667002] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.711649] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.718189] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.726337] Bluetooth: Invalid header checksum
[  664.731114] Bluetooth: Invalid header checksum
[  664.756285] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  664.785582] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.792053] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.820660] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.827161] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.834707] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.835906] Bluetooth: Invalid header checksum
[  664.841185] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.853643] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.860117] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.868747] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.875183] Buffer I/O error on dev loop0, logical block 0, async page read
[  664.912027] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  664.918532] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x52a80, 0x0)
utimensat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x0, 0x7530}}, 0x100)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='net/fib_tr\x7festatA')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x8, 0x8a7, 0x368b, 0x4, 0x82}, 0x14)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000200)=0x2759, 0x4)

22:17:29 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x195, 0x0)

22:17:29 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x3, 0xffffffffffffff9c})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
open_by_handle_at(r1, &(0x7f00000000c0)={0x5c, 0x8, "f7c45f11da9c32dfc8296fa7599aeb2b5879fd5df2e94c581931ff51e0583e9de9f87ba72487fe2a90d66d35631721e61db8b398875b41949924c9e48475923909f95634e971c5bfac6d525efee0551cb36fad8c"}, 0x4000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)

22:17:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x3)

22:17:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffffff0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:29 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf00)

[  665.063596] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:30 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x196, 0x0)

22:17:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4)

22:17:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1})
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000100))
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  665.260436] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:30 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x197, 0x0)

22:17:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x40030000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x5)

22:17:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1d00)

[  665.548593] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  665.651704] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:30 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="1b54580568c6d7625e05b7d6e00cd1a957dd4549cc11641df1f9cfa84d0863173c95d50753b3410d6cb79ca321997654435b6948450f4cee42e5acbcde5fe9b74577c1b28f8de6a3b5d59961fe95fad1cce23991b7ff", 0x56)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:30 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x198, 0x0)

22:17:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6)

22:17:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffffffffff, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3f00)

[  666.019702] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:31 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x199, 0x0)

22:17:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x100000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7)

22:17:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x4000)

[  666.207072] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:31 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19a, 0x0)

22:17:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x103000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  666.430765] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:31 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
write$cgroup_int(r1, &(0x7f0000000000)=0x9, 0x12)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
fadvise64(r0, 0x0, 0xa00000000, 0x2)

22:17:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x8)

22:17:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x200000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:31 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19b, 0x0)

22:17:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xff0f)

22:17:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = getpgid(0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='B\x92\t\x93\xdd|\xc1\x1d')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:31 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19c, 0x0)

22:17:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x300000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f00000000c0))

22:17:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0xa)

22:17:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x400000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x40000)

22:17:32 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7fffffff, 0x2001)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x20000, 0x3)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x6}, 0x8)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:32 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2)

22:17:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x10)

22:17:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x500000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1000000)

22:17:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x600000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x48)

22:17:32 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x3)

22:17:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x700000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:33 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x9)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141040, 0x102)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x1, 0x1, 0x1, @remote, 'ip_vti0\x00'})
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x2000000)

22:17:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4)

22:17:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x10003, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={<r2=>0x0, 0x100000000, 0x20, 0xff, 0x1}, &(0x7f0000000180)=0x18)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x80000001, @ipv4={[], [], @loopback}, 0xeca4}}}, 0x84)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='nr0\x00')

22:17:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4c)

22:17:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x5)

22:17:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x800000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x68)

22:17:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3000000)

22:17:33 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0xc0200)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xa00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6)

22:17:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6c)

22:17:33 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@dev}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xc00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:33 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x0, 0x9, {"e13d162f647b0d26abd346f3abc13fe5"}, 0x80000000, 0x1, 0x80}}}, 0xa0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7)

22:17:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x4000000)

22:17:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x74)

22:17:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xe00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:34 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x8)

22:17:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5000000)

22:17:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7a)

[  669.412290] validate_nla: 10 callbacks suppressed
[  669.412300] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:34 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xa)

[  669.580074] Bluetooth: Invalid header checksum
[  669.584726] Bluetooth: Invalid header checksum
22:17:34 executing program 0:
r0 = socket$inet6(0xa, 0x7, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x1ffe)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
ftruncate(r2, 0x2008000)
sendfile(r0, r0, 0x0, 0x7)
bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0x7, 0x0, 0x6, 0x7d68301d}, 0x6)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x2)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000180)=0x4)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x1000000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x300)

22:17:34 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc)

22:17:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6000000)

[  669.853614] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  669.891298] print_req_error: 417 callbacks suppressed
[  669.891311] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:17:34 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x10)

22:17:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x500)

[  669.903080] buffer_io_error: 417 callbacks suppressed
[  669.903089] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x2000000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  670.007960] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.014495] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.026781] Bluetooth: Invalid header checksum
[  670.031411] Bluetooth: Invalid header checksum
22:17:35 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x13)

[  670.086602] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.093153] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.118339] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:35 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  670.133744] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.140280] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.157320] Bluetooth: Invalid header checksum
22:17:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x3f00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:35 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x16)

[  670.205835] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.212348] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.286172] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.292697] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.315921] Bluetooth: Invalid header checksum
[  670.337511] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  670.356055] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.362548] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.383810] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.390329] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.409762] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.416294] Buffer I/O error on dev loop0, logical block 0, async page read
[  670.424336] Bluetooth: Invalid header checksum
[  670.438285] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  670.444781] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x3, 0x8)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x600)

22:17:35 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x19)

22:17:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4000000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:35 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7000000)

[  670.790903] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:35 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1a)

22:17:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x700)

22:17:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4800000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:35 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf000000)

[  671.077869] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:36 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:36 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x29)

22:17:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0xa00)

22:17:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x200000)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x4, [], &(0x7f0000000100)=0x298})
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4a00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:36 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2c)

22:17:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x1f00)

22:17:36 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x10000000)

[  671.787862] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:36 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2f)

[  671.831438] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x2000)

22:17:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x4c00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:36 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1d000000)

22:17:37 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0xffffffffffffffd8)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r0, 0x3)
pipe2(&(0x7f0000000040), 0x0)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x29, @multicast2, 0x4e23, 0x4, 'none\x00', 0x2, 0x100, 0x5f}, 0x2c)

22:17:37 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x38)

22:17:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x3f00)

[  672.121252] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:37 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
sendto$unix(r0, &(0x7f00000000c0)="dc0306fa670c736e86de1c6813ab5b94d4e231903f09bab16b5fc3888e31c63e59983ef0b86706f2101ba46d78769f39c092975cbf1a49e3889f4982b8486e9ddb7b56cdba9a412c0428fa1903b1bc389e897397fd78b8cbaca1254abe4b07d755090f503d3fb2ac696c01f10ed5fd4134d2f9ecb7bd5660c5ed1ab4d8c8", 0x7e, 0x800, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)

22:17:37 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x48)

22:17:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6000000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4000)

22:17:37 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3f000000)

22:17:37 executing program 0:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x90)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0x1b, 0x2, 0x9e3})
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x7, 0x4)
close(r1)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r1, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  672.383966] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:37 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4c)

22:17:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4800)

22:17:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6558000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:37 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x68)

22:17:37 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x40000000)

22:17:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4c00)

22:17:38 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6c)

22:17:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6800000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6800)

22:17:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f00000000c0), 0x4a, 0x0)

22:17:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfdfdffff)

22:17:38 executing program 0:
r0 = socket$inet6(0xa, 0x800, 0xfffffffffffffffc)
close(0xffffffffffffffff)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={<r2=>0x0, 0x2}, &(0x7f0000000040)=0x8)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r3, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @broadcast}}, [0x9, 0xfffffffffffff09a, 0x9, 0x80000000, 0xffff, 0x80000000, 0x9, 0x80000000, 0x80000001, 0x7, 0x7000, 0x20, 0xfff, 0x7fff, 0x5]}, &(0x7f00000001c0)=0x100)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x6c00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:38 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x74)

22:17:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6c00)

22:17:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000100)="98a9b8215ad8d6fcbb", 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfeffffff)

22:17:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7400000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:38 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7a)

22:17:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7400)

22:17:38 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x14103f, 0x8000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={<r3=>0x0, 0x0, 0x80000000, 0x1}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e21, 0x122, @empty, 0x3ff}}, [0x9, 0xc56d, 0x68a, 0x4, 0xa17, 0x3, 0x8, 0x7, 0x5, 0x0, 0x7, 0xf21c, 0x1f, 0x6, 0x6]}, &(0x7f00000001c0)=0x100)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x7a00000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:38 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc8)

22:17:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xff0f0000)

22:17:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7a00)

22:17:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8100000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x24)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x1})
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0)=0x4, 0x4)

22:17:39 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x300)

22:17:39 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000))
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x100000)

22:17:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x88a8ffff00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:39 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfffffdfd)

22:17:39 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x500)

22:17:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0xf0ff7f)

22:17:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x9effffff00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:39 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x600)

[  674.543917] validate_nla: 9 callbacks suppressed
[  674.543927] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
getpgid(0xffffffffffffffff)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xc00, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f00000002c0)='net/ipv6_route\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)
eventfd(0xd0)

22:17:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x1000000)

22:17:39 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfffffffe)

22:17:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xb208000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  674.810028] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  674.981943] Bluetooth: Invalid header checksum
[  675.003866] Bluetooth: Invalid header checksum
22:17:40 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8d, 0x200)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)="ef0a8c62bcddc08356078ece3e45286af67d640ba1bb86d51ed28c3363f05a29a7be17d2813387a7a2247b8856c2546850d6743cbe1d7cde41f5928f1e4813356e0b5e7c1838f6a169b175ff14384cee4aaab8d5b480b6be95db078abfbc5dc73e75a25a335ced01ce1d899c96ea4ee96f60733f70716ef056e796397c1462a8", 0x80)

22:17:40 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x700)

22:17:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xf0ffffff00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x2000000)

22:17:40 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x4000000000000)

[  675.229865] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  675.250230] print_req_error: 417 callbacks suppressed
[  675.250242] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.261950] buffer_io_error: 417 callbacks suppressed
[  675.261960] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:40 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xa00)

22:17:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfeff000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  675.284921] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.291434] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x3000000)

[  675.343115] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.349657] Buffer I/O error on dev loop0, logical block 0, async page read
[  675.408512] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.415027] Buffer I/O error on dev loop0, logical block 0, async page read
[  675.436875] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  675.446115] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:17:40 executing program 4:
socketpair(0x4000008, 0xe, 0x8001, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@deltaction={0x170, 0x31, 0x810, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0xbc, 0x1, [{0x18, 0x16, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x829}}, {0x10, 0x6, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x14, 0x4, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0xb4}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0x519f84a8}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xd, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x18, 0xa, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x14, 0x16, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8051)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:40 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc00)

[  675.452593] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xff0f000000000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  675.525503] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.532023] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4000000)

[  675.572358] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.578910] Buffer I/O error on dev loop0, logical block 0, async page read
[  675.598895] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.605448] Buffer I/O error on dev loop0, logical block 0, async page read
[  675.617479] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.623960] Buffer I/O error on dev loop0, logical block 0, async page read
[  675.665553] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  675.672080] Buffer I/O error on dev loop0, logical block 0, async page read
[  675.702854] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:41 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x1000, 0x4)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
connect(r1, &(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80)

22:17:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x100000000000000)

22:17:41 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1300)

22:17:41 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x102, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
write$tun(r0, &(0x7f0000000180)={@void, @void, @mpls={[{0x40, 0x1000, 0x80000001, 0x2}, {0x4, 0x7ff, 0x6ef8, 0x5e}, {0x5, 0x3, 0x8, 0x20}], @llc={@llc={0x4e, 0xee, '{', "8c76960a5a02c79e8544df612ed65e2020348eceb0d6e856532289f942dde4da8c835d0d78b1990e92baea5dc88741145546d3f790fd0fca02a18a50176655c8905e1fa8386f1e31b568dfe368686f9af71136cd8d3e946a8c1c836463a1c3489057a74ee08d55fc4ac7491b827b87f3fc4e1af9e1ba197d1dc37ec0dcce563004afa5a176692519c275fa5a6d98953ff9b5123f1f75100345e31550f194a1cd9bfee509d0c32e00029d68888a39600b6e4effbb7c4a80c16ecd3607ed58b889213f569d97bd55e83ce4e830279f968d"}}}}, 0xdf)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x5000000)

22:17:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffff7f00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  676.155374] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6000000)

22:17:41 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1600)

22:17:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xffffffff00000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x200000000000000)

[  676.371440] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:41 executing program 4:
r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x81, 0x2000)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:41 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1900)

22:17:41 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7000000)

22:17:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0xfffffffffffff000, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x300000000000000)

[  676.700171] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:41 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1a00)

22:17:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x8000000)

22:17:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x400000000000000)

[  676.939869] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:41 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2900)

22:17:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  677.209175] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x6, 0xff, 0x8, <r1=>0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0xb, "7e2fb44194bd92e5025747"}, &(0x7f00000001c0)=0x13)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0xa000000)

22:17:42 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000000c0)={0x3, 0x1, @stop_pts=0x8})
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r1, r3, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:42 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2c00)

22:17:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x500000000000000)

22:17:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x10000000)

22:17:42 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2f00)

22:17:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x600000000000000)

22:17:42 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
mq_timedsend(r1, &(0x7f0000000000)="73ca752756f654a47b8fbc7ae374dd3851286bad35bd05ebf8a6a04a697f43d2bd684ef09d0b1f737375227ae36591e22581a8d24fc44d004d382902f9c71bd2e00acce763", 0x45, 0x10000, 0x0)
ioctl$TIOCSCTTY(r1, 0x540e, 0x8)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:42 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x3800)

22:17:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0xf}, 0x400000000000000, 0x3, 0x2, 0x6, 0x3, 0x6}, 0x20)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x1f000000)

22:17:43 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4800)

22:17:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x700000000000000)

22:17:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:43 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4c00)

22:17:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x20000000)

22:17:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf00000000000000)

22:17:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:43 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0xec, 0x5}, 'port0\x00', 0x21, 0x80000, 0x624, 0x3, 0x9, 0xb14, 0xe99, 0x0, 0x2, 0x2})
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x3f000000)

22:17:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
eventfd(0x7de1)
perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x7, 0x4, 0x3, 0x8000, 0x0, 0x38a0c56b, 0x4800, 0x4, 0xfff, 0x100000001, 0x8b1, 0x1, 0x7fff, 0x88, 0x6, 0x80000001, 0xca7a, 0x5, 0x1, 0x6, 0x3f, 0x800, 0x925a, 0x5, 0x2, 0x1, 0x3, 0x8198, 0xffffffff80000000, 0x7, 0x8e7f, 0x9, 0x9, 0x100, 0x1f, 0x101, 0x0, 0x2dc, 0x2, @perf_config_ext={0x6, 0x3}, 0x80, 0x5, 0x4, 0xf, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x9, 0x4, 0xb6, &(0x7f00000001c0)="42686677a01ca7f5396ec6a1782d312862369fdb81ae4c6ebd258f3f96eb3c4e6a9927c9efc62bbc32bafc61cf36aaa507a25445ec0b9abf55888c8d1616d8e0c602ac76eb3e61c6aabf89c82815d4e9d5bcdb63c8fee8d1da59f81bffa904a00ca43278470037db92511e462fdbc4cf3ffe7b2ea8fa8340a4acd233814a1bae21c9780cf02bbf34dd62a97553d0925296824232076aa615c18cc42d44fcd78ba7a97f1b029ecb302f8ee3a74a8fb0f7f758df0c9ce2"})
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:44 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6800)

22:17:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xa}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1000000000000000)

22:17:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x40000000)

22:17:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x48000000)

22:17:44 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6c00)

22:17:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xc}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1d00000000000000)

22:17:44 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7400)

22:17:44 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01020000000000000000090000000c0003000800010000000000"], 0x20}}, 0x0)
inotify_init()
ftruncate(r1, 0x2008000)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x44)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4c000000)

22:17:44 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/73}], 0x2d7, 0x400000)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xe}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:44 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7a00)

22:17:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3f00000000000000)

22:17:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x68000000)

[  679.992111] validate_nla: 7 callbacks suppressed
[  679.992121] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=<r0=>0x0)
socketpair(0x1f, 0x3, 0x7, &(0x7f0000000680)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000006c0), &(0x7f0000000700)=0x4)
r2 = syz_open_procfs(r0, &(0x7f0000000140)='net/fib_triestat\x00')
clock_gettime(0x0, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x7, 0x7, 0x6, 'syz1\x00', 0x9}, 0x0, [0xc0, 0x100000000, 0x10000, 0xc164, 0x870d, 0x1, 0x5, 0x2c, 0xe449, 0x328, 0x3, 0x800, 0x8, 0xa92, 0x2, 0x8, 0x7, 0x4, 0x7, 0x7, 0x9, 0x4, 0x5, 0x56f3, 0xb7a7, 0x59, 0x0, 0x44dc1243, 0xc0000000000, 0x4, 0x7, 0x7, 0xae, 0x8001, 0x20, 0x0, 0x3121, 0x1, 0x6, 0x9d2f, 0x0, 0x40, 0x0, 0x6, 0x8000, 0x5, 0x7, 0x874, 0x87, 0x37, 0x2, 0x3, 0x7, 0x3, 0x7, 0x401, 0x101, 0x2, 0x8, 0xc9f3, 0x8, 0x7fff, 0xaed, 0x4, 0xac54, 0x0, 0x8, 0x6, 0x0, 0x6a15657e, 0xffff, 0x1f, 0x6, 0x401, 0x100000000, 0x1fd5, 0x3ff, 0x6, 0x3b3, 0x6, 0x6, 0x1, 0x8, 0x8614, 0x83, 0x104, 0x3, 0xbb63, 0x9, 0x2, 0xc116, 0x10001, 0x3f, 0x756, 0x9, 0x8000, 0xb4, 0xd0c, 0x1, 0xfff, 0x8, 0x0, 0x20, 0xffffffffffffffc0, 0x3f, 0x8a, 0xbdf, 0x8, 0x2cf, 0x1c1e, 0x2, 0x7ff, 0x3f, 0x7, 0x4, 0x4, 0x9, 0xffffffff, 0x80000000, 0x0, 0x0, 0xffffffffffff70c3, 0x0, 0x4, 0x8, 0xfffffffffffff000, 0x3, 0x505], {r3, r4+10000000}})
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:44 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc800)

22:17:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:45 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x4000000000000000)

22:17:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  680.255335] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  680.327144] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:45 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x103000, 0x44)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fgetxattr(r1, &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000100)=""/247, 0xf7)
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x800, 0x200000)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:45 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xf0ff7f)

22:17:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6c000000)

22:17:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = gettid()
getpid()
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/proTrls\x00\x00\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x10}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:45 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfdfdffff00000000)

22:17:45 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1000000)

[  680.820592] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  680.854634] print_req_error: 417 callbacks suppressed
[  680.854647] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:17:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6cefff7f)

22:17:45 executing program 4:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  680.866406] buffer_io_error: 417 callbacks suppressed
[  680.866415] Buffer I/O error on dev loop0, logical block 0, async page read
[  680.879436] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  680.885945] Buffer I/O error on dev loop0, logical block 0, async page read
[  680.903142] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  680.909649] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x48}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  680.959141] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  680.965680] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:45 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  681.030735] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  681.037268] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:45 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2000000)

22:17:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x74000000)

[  681.080073] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  681.086592] Buffer I/O error on dev loop0, logical block 0, async page read
[  681.109661] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfeffffff00000000)

[  681.178414] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  681.184929] Buffer I/O error on dev loop0, logical block 0, async page read
[  681.223688] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  681.230241] Buffer I/O error on dev loop0, logical block 0, async page read
[  681.263021] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:17:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  681.269584] Buffer I/O error on dev loop0, logical block 0, async page read
[  681.299180] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  681.305733] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:46 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x3000000)

22:17:46 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3f, 0x2)
ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0))
close(r0)
linkat(r1, &(0x7f0000000000)='./bus\x00', r1, &(0x7f0000000100)='./bus\x00', 0x1400)
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000140)=<r4=>0x0)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f00000001c0)=r4)
ftruncate(r3, 0x2008000)
sendfile(r0, r3, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7a000000)

[  681.394230] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xff0f000000000000)

22:17:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  681.698434] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:46 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x7)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
getpeername$ax25(r1, &(0x7f0000000280)={{}, [@default, @rose, @null, @bcast, @remote, @default, @null, @default]}, &(0x7f0000000100)=0x48)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x20e, 0x5, 0xbe, <r3=>0x0}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={r3, 0x83, "869944e0a65f3e2f7f154c246dd64a3b2dd5a40fa09611c41203f4a95d48916b9e1f3ed16be9fbe9f92df51476f51d2bddb0833f9f8c55257b8dceaa7bef40d101e1f08e42e44ec69ed87cb2cac87d538624bc19ee90dc43cde192df861fb9a2ca5bddd4ccef959c1ccd0fd966f7dd761c5472413c17873e3bd3b65c1b9f5393b73f5c"}, &(0x7f0000000440)=0x8b)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180))

22:17:46 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4000000)

22:17:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7fffef6c)

22:17:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xffffffff00000000)

22:17:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x60}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  682.051682] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x68}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:47 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x5000000)

22:17:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0)
ioctl$KDSKBLED(r0, 0x4b65, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x40000000000009)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)

[  682.256293] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:47 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x2})

22:17:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7ffff000)

22:17:47 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6000000)

22:17:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:17:47 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7000000)

22:17:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7ffffffff000)

22:17:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000180)=0x3)
ioctl$KDENABIO(r0, 0x4b36)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:47 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
r3 = dup2(r0, r1)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000240)={[{0x1, 0x3, 0x3f, 0x4, 0x7, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x9, 0x8, 0xfffffffffffff0c1, 0x4}, {0x4, 0x1ff, 0x13d, 0x7, 0x9, 0x1f, 0x3514, 0x8001, 0x2d84, 0x5, 0xc1, 0x10000, 0x1}, {0x8, 0x2, 0x1, 0x3, 0x78, 0x100000001, 0x2, 0x1, 0xffffffffffffffff, 0x200, 0x5, 0xff, 0x4}], 0x3})
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x120, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)

[  683.001172] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x10000000000000)

22:17:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x74}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:48 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
ftruncate(r2, 0x208200)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x5062, 0x4)
socket$rds(0x15, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)

22:17:48 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x8000000)

22:17:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffeffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x4400)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000240)=""/156, &(0x7f0000000300)=0x9c)
r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x5}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r1, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x2)
open(0x0, 0x14103e, 0x27)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000002080)=""/4096)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
getpgrp(0xffffffffffffffff)
ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f00000001c0)=0x1)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)={0x0, <r7=>0x0, 0xfffffffffffffff7})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={r7})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
clone(0x2004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000080)={&(0x7f0000630000/0x4000)=nil, 0x100000000000004, 0x6, 0x0, &(0x7f00002ef000/0x2000)=nil})
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000))
r8 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x2cc000)
ioctl$LOOP_CLR_FD(r8, 0x4c01)

22:17:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0xf0ff7f00000000)

22:17:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x50}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
semget$private(0x0, 0x3, 0x402)

22:17:48 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xa000000)

22:17:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x103}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0xf0ffffff7f0000)

22:17:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:48 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc000000)

22:17:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x100000000000000)

22:17:49 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
dup2(r0, r0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x404000, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:49 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x10000000)

22:17:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x301}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x200000000000000)

22:17:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xfff, 0xf, 0x3})

22:17:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2000, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xc23, 0x82)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x410020000003fff)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xffffffffffffff7e)

22:17:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x500}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x300000000000000)

22:17:49 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x13000000)

22:17:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xffffffffffff0001, 0xd67, 0xe91e, 0x81, 0x12, 0x1f, 0x7ff, 0x7ff, 0x9, 0x1, 0x3, 0x17})
ioctl$TCXONC(r0, 0x540a, 0x1ff)
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x4000)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={<r2=>0x0, 0x8, 0x30}, &(0x7f0000000140)=0xc)
setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000340)=0x9, 0x4)
connect$bt_rfcomm(r0, &(0x7f0000000380)={0x1f, {0x9, 0x1ff, 0x200, 0x3, 0xfffffffffffffff7, 0x1000}, 0x5}, 0xa)
write$FUSE_GETXATTR(r1, &(0x7f0000000300)={0x18, 0x0, 0x6, {0x8}}, 0x18)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000002c0)=0x10, 0x4)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x7ff, @rand_addr="e0d81ad4324d5d3899c783988abdf490", 0x8}}}, &(0x7f0000000280)=0x84)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xc)

22:17:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x600}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x400000000000000)

22:17:50 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x2)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:50 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x16000000)

22:17:50 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x340, 0x0)
r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0xc0000)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={<r2=>0x0, 0xa768, 0x30, 0x0, 0x20}, &(0x7f00000001c0)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={r2, 0x7f}, 0x8)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040))

22:17:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x700}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  685.522022] validate_nla: 10 callbacks suppressed
[  685.522033] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:50 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x3f}], 0x1, 0x0)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6000000000, 0x480000)
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000100))
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x500000000000000)

22:17:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8b2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:50 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x19000000)

[  685.705257] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:50 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40, 0x0)

22:17:50 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1a000000)

[  685.841473] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x600000000000000)

22:17:51 executing program 0:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0)
r0 = socket$inet6(0xa, 0x8000000000080000, 0xffffffdffffff801)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:51 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x29000000)

22:17:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x1, 0x0, "acd077352ad5eaf12395805f0c2e1401636ae1435548cbb07077218c42a30662e1819bae4a6ab2e69374cb3ae325a763a5cb538c2d97700c8c74c4202753c02d1406bc26138c07a90a633e08be207c83"}, 0xd8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x100)

22:17:51 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000380)=""/77, 0x4d}], 0x1, 0x0)
fcntl$getown(r0, 0x9)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000340)='net/rfcomm\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x7, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffff80000000}, @exit, @call={0x85, 0x0, 0x0, 0x40}, @alu={0x4, 0x7, 0xb, 0x9, 0x0, 0xfffffffffffffff0, 0x4}, @exit, @jmp={0x5, 0x8001, 0x0, 0xf, 0x4, 0xfffffffffffffffe, 0x1}], &(0x7f0000000100)='GPL\x00', 0x5, 0x86, &(0x7f0000000140)=""/134, 0x41f00, 0x1, [], 0x0, 0x7}, 0x48)
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x700000000000000)

[  686.422991] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:51 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0xac, 0x800, 0x291b, 0x0, 0xffff, 0x2800, 0x2, 0x6, 0xf8, 0x800, 0x1, 0x1, 0xffffffff, 0x38, 0x0, 0x8, 0x9, 0xd4, 0x2, 0x80, 0x3ff, 0x8001, 0x0, 0x20000000, 0x101, 0x2, 0xfffffffffffffffd, 0x401, 0x9, 0x1, 0x8, 0x7, 0x4, 0x1ff, 0xdd5, 0x0, 0x1, 0x6, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10080, 0x4, 0xfffffffffffffc01, 0x4, 0xc2, 0x3ff, 0x1}, r1, 0xe, r0, 0xb)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  686.499168] print_req_error: 356 callbacks suppressed
[  686.499180] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.510949] buffer_io_error: 356 callbacks suppressed
[  686.510959] Buffer I/O error on dev loop0, logical block 0, async page read
[  686.527098] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.533604] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:51 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2c000000)

[  686.560219] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.566758] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x800000000000000)

[  686.612728] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.619749] Buffer I/O error on dev loop0, logical block 0, async page read
[  686.648643] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x400000000000, 0x0)
fcntl$getflags(r0, 0x409)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x3, 0x7, "0dc1fa5eadf903"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1)

[  686.669278] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.675795] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  686.760385] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.766879] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:51 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
ioctl$RTC_VL_CLR(r1, 0x7014)

[  686.802569] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  686.811459] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.817959] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:51 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2f000000)

22:17:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0xa00000000000000)

22:17:51 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000000c0), 0x458a20217412c78c, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  686.867592] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.874113] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  686.936305] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  686.942800] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:51 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x38000000)

[  687.026207] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  687.032739] Buffer I/O error on dev loop0, logical block 0, async page read
[  687.047229] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x1000000000000000)

22:17:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = getpgid(0xffffffffffffffff)
ptrace$peek(0x3, r0, &(0x7f00000000c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
accept$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:52 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:17:52 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x48000000)

[  687.261284] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x1f00000000000000)

22:17:52 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt(r2, 0x1, 0x1, &(0x7f00000000c0)=""/169, &(0x7f0000000180)=0xa9)
close(r0)
ftruncate(r2, 0x2008000)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000000)={0x0, 0x100, {0x52, 0x4, 0x34a, {0x4, 0x3}, {0x2, 0x80000001}, @ramp={0x4ef8, 0x536, {0x1, 0xdf2, 0x8, 0x2}}}, {0x53, 0x3, 0x6, {0x5e2d, 0x95}, {0x4, 0x9}, @const={0x4, {0x4, 0xffffffff, 0x4, 0xca3}}}})
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:52 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
gettid()
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:17:52 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4c000000)

22:17:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x2000000000000000)

22:17:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400000, 0x12)
write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7, 0x4d, 0x2}, 0x7)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r1, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffffff00}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xdca}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x800)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x3, 0x9, 0x7, 0xa, 0x8, 0x8001, 0x23, 0xfffffffffffffff7, 0xffffffffffffff42, 0x9, 0x8000})
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  687.772698] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x3f00000000000000)

22:17:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:52 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x68000000)

22:17:52 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x300)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0xfffffffffffffffb, 0x0, 0x201d, 0x0, 0x10000, 0xfffffffffffffffa})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  687.963107] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:52 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x4}, 0x28, 0x2)
fallocate(r1, 0xc, 0x4, 0xbc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:52 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6c000000)

22:17:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4000000000000000)

22:17:53 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0xf7)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000))

22:17:53 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x74000000)

22:17:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
ioctl$KDENABIO(r0, 0x4b36)
fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x3)

22:17:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4800000000000000)

22:17:53 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:17:53 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7a000000)

22:17:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:53 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000300)=@raw=[@ldst={0x2, 0x3, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, @exit, @exit, @map={0x18, 0x3}, @map={0x18, 0x8, 0x1, 0x0, 0xffffffffffffff9c}, @exit], &(0x7f0000000380)='GPL\x00', 0x4, 0x8a, &(0x7f00000003c0)=""/138, 0x41100, 0x1, [], 0x0, 0x1}, 0x48)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000500)='/dev/amidi#\x00', 0x8e, 0x1fff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix={0xffffffff7fffffff, 0x6706, 0x41414270, 0x9, 0x2, 0xffffffff, 0xf, 0x5, 0x1, 0x7, 0x1, 0x3}})
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x4c00000000000000)

22:17:53 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7fffefac)

22:17:53 executing program 3:
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x13)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xb)
ioctl$KDADDIO(r3, 0x400455c8, 0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180))

22:17:54 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7ffff000)

22:17:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000000c0)=""/54)

22:17:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6800000000000000)

22:17:54 executing program 3:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x103000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{}, {}, {}, {}]})
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={<r2=>0x0}, &(0x7f0000000240)=0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000002c0)={{0x5, 0x3, 0x8, 0x1ff, 'syz1\x00', 0x97}, 0x3, 0x400, 0xfffffffffffffffa, r2, 0x2, 0x4, 'syz0\x00', &(0x7f0000000280)=['\x00', '})&trusted$\x00'], 0xd, [], [0x1, 0x4, 0x4024, 0x3]})

22:17:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:54 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xacefff7f)

[  689.343856] Unknown ioctl 21539
[  689.366119] Unknown ioctl 1074025928
[  689.393409] Unknown ioctl 19302
[  689.437630] Unknown ioctl -1055894255
[  689.468644] Unknown ioctl 21539
[  689.468963] Unknown ioctl 1074025928
[  689.552245] Unknown ioctl 19302
[  689.605854] Unknown ioctl -1055894255
22:17:54 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x10)
creat(&(0x7f0000000000)='./file0\x00', 0x4)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, &(0x7f0000000040), 0x80)
ftruncate(r2, 0x2008000)
sendfile(r3, r1, 0x0, 0x80000000000f)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6c00000000000000)

22:17:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:54 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc8000000)

22:17:54 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17)

22:17:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
sendto$netrom(r0, &(0x7f0000000180)="63da9b945f67bb208d8734b6efea6c5f637cd21ee8a7827f2c2cc53801ddd5d4ac7908894d092b2c41a2c481d3499a43ec0c67f18977b90711e919102e63c59774fd9f84b27b5d6d0b56bed5cbf97775618dba6cd97a0a103ad0cdf758d2d0f6927ed78bf146a5de00a562391a19da1b0cccb831c03d730797b109164aa9c2b001e96e64c527fe2bbfe475507f01", 0x8e, 0x80, &(0x7f00000000c0)={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

22:17:55 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7ffffffff000)

22:17:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x6cefff7f00000000)

22:17:55 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x9b81c1737c0ccf43, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}]}, 0x48}}, 0x40)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  690.268984] Bluetooth: Invalid header checksum
[  690.273697] Bluetooth: Invalid header checksum
22:17:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:55 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xf0ff7f00000000)

22:17:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:17:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7400000000000000)

22:17:55 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xf0ffffff7f0000)

[  690.613244] validate_nla: 10 callbacks suppressed
[  690.613254] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xb208}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  690.880907] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:55 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)='net/fib_triestat\x00'}, 0x30)
r1 = syz_open_procfs(r0, &(0x7f00000001c0)='n\xfa\xff\xff\xff\xff\xff\xff\xff\xbe`e\xf9\f\xc5\x01\x7f')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:55 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x100000000000000)

22:17:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x7a00000000000000)

22:17:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x106, 0x100a}}, 0x20)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r8=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r7, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r8}}, 0x10)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r10=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000800)={r10, 0x1}, 0x8)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
sendfile(r5, r5, 0x0, 0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000480)={0x1, 0x400, 0x1, 0x1})
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="210025bd704cfddb25030000000c00050063052364976e89cc6de005af24010500000000003ebbb9e1f8ed3d5c502ace10e312a3d0015968078bf64065bcce1ef9fda19f706eca967b817a3c8855a18d33f60cb301f995dec4564ffa037141bb63d93d888a2b14bb96885bde4b943c4c93213f70370460d0908342dbddd49be23e0643d71d7ed6c6c2eb5ff5732ad1914892525102e7e4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20044040)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000ec0)={0x13, 0xfeeb, 0xfa00, {&(0x7f0000000c80), r6}}, 0x1c0c92704baa55e7)

22:17:56 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f00000001c0)='./bus\x00', 0x100000000)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'vlan0\x00', 0x3ff})
ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved})
ftruncate(r2, 0x2008000)
fchdir(r3)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000200)=""/159)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={<r4=>0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7fffffff, 0x7, 0x2, 0x0, 0x4, 0xfffffffffffffff7, 0x3ff, 0x9, 0xffffffff00000001, 0x4, 0x2, 0x6, 0x5, 0x0, 0x566b]}, &(0x7f0000000000)=0x100)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, 0x4)
write$binfmt_elf64(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x1ff, 0x5, 0x3, 0x1, 0x3, 0x7, 0x9, 0x1fd, 0x40, 0x14, 0x2, 0xfffffffffffffffa, 0x38, 0x1, 0x8001, 0x4, 0x4}, [{0x7, 0x6, 0x2, 0x1, 0x2, 0x6, 0x6f, 0x2}, {0x70000000, 0x8001, 0x10000, 0xbcb, 0xec5f, 0x4251b524, 0x4, 0x7}], "d46dc348462c88b17fa43b82db4dbc85cee90ec8d18e76447d5b368688823467193822c08b87a0f72d2c7defc9241211c1a12ad8c404d18ca4f8b4e194469c08", [[], [], []]}, 0x3f0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
fcntl$addseals(r0, 0x409, 0xa)

22:17:56 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000004c0)="5c414474828f397c3b72af38def96a7ce544d041a87490065040530d794e7755c9c44b8db66df86583adafbd495f04f1c8d7d0dd79c142bb156dd258769270d3225987e0c97f9429ed0260d942d90f1bb317356b785421c417981a39e404070927bcbb08e95b0fce6feddafb3f684ae5280ee442a8c2f579e8e844c168c27e16662adc27758d6f", 0x87)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0x1, &(0x7f0000000480)=0x4)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x210, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7d2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfd0b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbe24}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd201}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40000000000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbdb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4084}, 0x4000001)
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
lseek(r0, 0x0, 0x2)

22:17:56 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x200000000000000)

22:17:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x3ff)
syz_open_pts(r0, 0x40200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:17:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x9, 0x8}})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  691.365974] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:56 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x300000000000000)

[  691.510713] print_req_error: 359 callbacks suppressed
[  691.510725] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.522479] buffer_io_error: 359 callbacks suppressed
[  691.522489] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfeff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  691.596031] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.602572] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:56 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x400000000000000)

[  691.652866] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.659403] Buffer I/O error on dev loop0, logical block 0, async page read
[  691.715345] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.721908] Buffer I/O error on dev loop0, logical block 0, async page read
[  691.753422] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  691.773986] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.780519] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:56 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x500000000000000)

[  691.834048] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.840594] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xff0f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  691.888450] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.894979] Buffer I/O error on dev loop0, logical block 0, async page read
[  691.964946] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  691.971481] Buffer I/O error on dev loop0, logical block 0, async page read
[  692.010153] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  692.031543] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  692.038076] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:57 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/4096)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001580)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000001680)=0xe8)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000016c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000010c0)={{0x401, 0xfffffffffffffffa}, 'port0\x00', 0x8, 0x48, 0x40, 0x100, 0x1283, 0x6, 0xfffffffffffffffe, 0x0, 0x2, 0x3})
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r3, 0x2008000)
sendfile(r0, r3, 0x0, 0x80000000000d)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000040)={0xffff, &(0x7f0000001180)="7ff3630cdd4f7438291d7c43bb20eb31086c337d2a14439fd9606cbabd36d671810b14d73aa95e5462f26eadc60e376d7497f674e794f882b3c03594ae32fb4e4d0f6714089048c521192844a6f049ed41db203a2836020091a39277874f60b846e77e456d8e6755f9375f22b5752acd5d9f6b316cce7c52ec4ee7e776e3ffbc40f0bcbde71370df301be9a5c5d510"})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x3f)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
socket$nl_route(0x10, 0x3, 0x0)

22:17:57 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x600000000000000)

[  692.063164] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  692.082290] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  692.088817] Buffer I/O error on dev loop0, logical block 0, async page read
22:17:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x79, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffe}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x1)
getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:17:57 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x700000000000000)

22:17:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
write$capi20_data(r0, &(0x7f0000000240)={{0x10, 0x5, 0x8b, 0x83, 0x10001, 0x1ff}, 0x1000, "b047b4fe2b3088039fc337236f37af1fa1177d20fdf747f74384efb1e27d8244b6a81bf75564312e8f23b4a0d0241748c9cd2c065c567a9230d8de7bdc3f1d5992325ef4f4253442d6b745791b123b94cb57cbe6c6dfca86e55e6201e550a090ba62ce53c429af814a35ab27206f26e783810cad2c9717523813fd9055395d7a75392e82aabc28876692f8124bb797fcb63dfd3c0ddf0bc4c449c1c60b576a69fd9d7639cf47be28c5d10d010d5b0b6cf619742e58e039da710811fa681d82dfa3d4726a3c1a33b6893d023bc0984f733cf61220c63bc2fdaf381aa9384dc48783d89b310b5e782dc7f1424444820848ac5c2d39367b06f22d10af25481b0d93d840fe896a38370d613dda65d23d81eaaf11bdc6488cf60ddda20412a6fcd23faa2418c3fee51914b455cd2ab04d52ea9df2c783e7b5c5e3208cf33bfd11688bcb5806a942cf06b3712a435a60200f5e0106c26545347942bc252f9a43df5dc94b38503169738f87d0456353cabd207d0a7ca5896931fb08f7dca67e4a7af707b00316359a2ff8f194122319446d6fc9f3c95af39943d6616c6a9a01390873a0e6114cccacfbb907032d93a7ef193bac12bf93f022b78c7f9087502367383732e18489ed18c7df1f14e1b07057a3c8959ca9a525c5f8ca941ea00ccd13b5a561afaa01b9100fa9dec325ce5234c0fdd1535738f7e0d39bcef662a6aac5aa724031838621914dc38946e0a2f56089de77d83ae506fffbc2d52b72b4b7a4ca3a161a7a1e0e5c9da4fed5c5e131f710c8fc947ea51f8c5996cc749328778d60a652de069f2151eeb81f205e57fb878720bddb1e5e224a37404742d199ca2e0561bfa6b505ee95ce371806f3489ed1f3fefee0c8594e28b16bd20cbff745d04c01d7262573fbed9a608b2bac7c76a261c2c0d4dd0a738c15c229ca728d005862c701fb52be4e19ce86ad19b1e4b513759c3ef8b2f813ab76819f66662e79f890aaf60fe0135719d139d6b43baf70938e1fbab4ed31b685301a1833117206aab41e3ececa2c50e1ed80302717b25884aab25c9eade60e981cd36e2785ecd9a99e29fa6fca91073e9efb61a00464b405d0176959a6b1df01ca27359157db0b13e269814c4aa4212132b24c132ead744ff43d760d2d9ae44a1f9b5337ef6e197fbb984bd530afb17e04865ebeb6d76df995a953ae0c40d69d58e0e530cf849f16941af8fdd9a7c95b8245a2851c376c08b0ef10d0637c4d7a8cdb14bb0a06ef9ba432a823f98c583442c52028d9eaa79223379fcaeea95bb0b37e81171fe779870bec8d19da864c4292c833530dcdee2167c1c808beb80482921142d2484b2795703ee87748e362863afe52e4c9baf936190eb472b46a7c8815d931b25ab9f9eb8a95d0bdca23cce57e21ae2a562bb773197e110829bdc693b84fec9bc218ec60f84b986dea7992095223d79bbb2cdcf3e44a3cba02bab4becb1d8ce8f028cced3c03f8ede394caa7e1e93b1741c832aedb78052bf170691aebc7d0ec1ffbc02af555ed200ee7abf4f3fd5e790541a3d97c8ceba30d27908519d27cc165609d186cd5dbd6352dd12361e126c6d3c5e428f50cf332e3e0a6c41d57711539d3dc3642c70a8bef72d9eb1f8bb1da9c3cfe0063a1c727c81818b1ca0e3ab351507708397515a66910fb4968d39fdf6e1b6e00a7c9c7ac77fdd18483da0b04edd8fcf38227677e0eac4dd2baab17361be71d1a936f1fb1d1970b13f20d0a12db0f8b4538f034dae6af5817e9a105dd2fd15c5bad4a69adc73eb0e2a8a8eb21b85783193a1b7a64c777d6951965699d7f782b61fd37434a66fd25098bf1893dca35246c9edb5a1ccd59d485f8a1d2c89861bb5b0df7b7e61f991afac1f91c4d894872e7cd1946cf574152579a1cefe79e78806bdc51f39a071d7fc7c76125e366dfeb410377fbb53514662e817a7280251a656d2fd52f8187142e9c4b97727da1ded8c79176583ed60401d976696ba0c2ae23d074b9d53826d3bcf88773c2a149b5bbb998af76f8d67a961d3728cdf08abe4a0cb18d2321e640ad53294e046e640d31031b9fc7a154415953c9265f273c59e0ace293f7cbfb5c27daaecf66213d0a82c24d3c92183e29cb4dd91235e4fc83a2ae7cd8ba238441600c966ab824c4a85868473b634433148143abdbfcf9efa679eada0323381ccbfa69a65c37b2e9a70d9ca0e6ae8c2dc8845f07ddd653f7c36c3d7a524e0e864ae2e95f29542d82924c45f0ddb58209eb7f981b7024737840bb8b65df226f8d1dd40aa687b7b1008bd878b774bfde149a26d2eb9ffde11042d2d08c3f32fd70e9d3314c0d6363a9f207a27027c3121652bb108686aeb446d38cb33f96a249ae3f1feca047568b9b83d8192661dae31fd1c7b0f6e5edc7e3ec8f38468353841f67ffb0f0b4ea325128d6b6e28d64584fb8640f345014d7334936270f0ed1aa81fa0576ab3b3b99fa18902274ed1ee63dd44746655faa025d3b0ae66315645b3157da965c13c58635738bdb23917e24337f8bc9df354a263f33a900320fe7db420498041db6e0e9d1eb99fb12418232e56a9eb514bd93529907c2a10cc0977f2438dc766d12efb2628208a42eaf2d34bedf62cb8a640683fedeedfa905a8a7cc0bace27400791ddcbfb5af6a6e043e9e764b3ee70102537292cecd6affabe26db39a4b2c475ddc71635af70abe65cff57446fcbd31fd5fbc4644d1499280de2ab304c7c0aa3d437fcb8ba5acd8666f98a0197b908902ff5031cefb46a19fce1009f998f121bc953a6ce2e93b0423988988596802a63350f4cb796058b110fec6d7e54afa6a7ceb6b50b10c79e674da8af83d47ce016dbfd471ee904db492544bafacccfba2800f3b818f5a296da0d3bd5c77412be290450447f803d6946b36465e1d2b517e3a4ae347136c5a0fab03b1c9b58622a7ddd1c43b1987c8e090c7d8e0c444c857bded15d1cca0fde9fd9d5a9ef86b688a2f7ec360531857ce9d3b1761eebf8354389cb2c57473535f49fbe9142fd79033d00818444e634faca195fb5e2ce594ba8c20ede37c88dbc5e87ecef6099ab909bc8d48b827329c3f9f5e34a392ecef4284d578e11aa3ef14eaa17ce2ac868ec2f174c78b8432039eff6f4175f0c3e40c0412f80dc95a6292af8117c2771842f0ffcda95799ebbd3e240a9726cb7e28d8ec6de025459062d4e23253e288edb36545c148942bf505e40b1fce7cf6f75c436a1778120370f66b62c441682aac3b4a7efe4e048513b26e95e2ca2d47765c6a85b55781b3662cacd9f021dc9f107052cbbd8f76a9846d472a532362212039d6516d834d4d40c69adf04a52d653aaac2f7e3b0c67032d2542fa0a2c8385e2c94d292c5fc1e15417fb0d073001e7ca2e806ac9fed6587a441dd0e1c329471b2fe326d26d1d3ff8767cfcfec95397e216defb5c16a0d8d54d53deab24cbd606be7f4e2b579327a1d9f12eb3c2ac04b933fbac4c367b0b3a987ccb6bd19c52096f7e0ce248d2afea007cd9dd59ca4e7c4e66f86b5b6db245a1e750d34b20d935fa0cd7130f44ea4aa12fe297ede1388a0263898b434f68f32f3b31cf558aa5987e0b8c59cc449c8dd7c5393bfd7f887805f42ba59471d5a12962972de3af12bcdf7efa96b20fdb017e5f72f7b23854a2c8fcb8a80d0e21c173d9ba0c80727997afd3e271e4083236ae211a55b50a9ff21a79635ef61ed9b0558ef2ab441fa50dd2ad233654020a9a08327dd0d1a196440bce9e6eace0ff4a9bca6072e803b6ffaed22e9f3b359bf874f559ed7d1b8b71980d006a84069ace0283fa8b0b0e9f1d5df5b05879e0b0b6742629879baa825ea9b56c84308818a48aaca2a4d1ada53afcbcc6d8a37eb1412f383b5dadcf165546700090272e07a9b519db8ec0272499251075d7a224fa6fa328d43f33e4cc69d1c2e16295826ead4496132cd01bb02db24fba179ded8d5a42da53fffa1df292c7965704121064d67dcdba519b09bdc9394624ac812917fecc21741455543441ccdc58901051caaee3be08e463691be2308fdbbafd67154e1097fff8350f4db0ec0ce76cb3a35991775f1d022425806329bcf0e57f2d2d3f6682d2092eefe25ab5c291047fa53e3083675f1fa549065ded67241689e243ca183bcd7d3cda0abc2c6aaa2609d37b6f6b1a288f0f8f1f29d7afe5353e5912037cf3cd4c615eb84b4ddb31bcc07c0ed5f86f31550b208c4cacd3e1cc4611dd2f9f98b3d3a6b878d3ba6786c5affcf8f65eff1afe86f4ea45396d436dae67277d26b118a4e1580a3a78206c8b777bfa48c381d4f80b0aeb8ae91fee39f5bd24489e7249d5d9d5d5e3285e9cf193a82826d70e45259c4c276210d478a0d7c2fb655256ab131ce9860c2f31b28019336eb9e61cf4bf342f8a2e4da3ef68d5fa9c6bdec555f5c69bf41d45ba1b1e0a655a458a42665483daa8ccbb7865b4b050313056b09a1a81ac9e85585561845654cf56a2feb0b5b840acc1d8b05844135ba7bc8ff65e1257f9ebce59a6103125aba4b7a4d2474eefb671ba900edb8e2e3c0a2990856fdd9aaf823aa23b0edb53170968926f9e126b066c8bf9711286bfca161608764003f6a165981a4b418eac455c78faff0b9cd65db827a5e806c1fa4af56debb7ec971a1266835339d7c77348352900203d23b2817568302879e66b28316e6fec096fa38d69954056a31fc10e61aef541171b837e0fd1a0ef373f6f44ea575e126bf3f4b2a26dd311659fcfde6cb07e2de56b3b4083ab1ca40855a413a312e2ba5c28a401995bf12f0585ea44a7e002f1f2261176c9a76dffd2b80b97c09d1fdd416172766c7062137d78c41526affe100236243f76d7cb7c01e2ae6e539b771613060aed82789d31416895dd098b7b98dbc27c73dc1c5e34610d983bf9b44ea3ca7c5d3d665dc6777b8f3287cd8288ae8893031a13acf793218e09805770eb6578cc014e60214d8a75922cfdfb9a7e6795e54cfdfe52ff3e62cb70ef0f74b3c87d4777e119e492500f0f9576ba60871347fc273a3b3e32386e1621864cb21cce6d9e816bcdc24461e539627afe2adea042149030d916682222e9309f3e0147a914bdd4fc51c93826b4e73c683a48567810f2e8def8dbda167e1306f65c926296d2c6c3467bfccc893080d09e5c6694b6b368338f8c837ae068fb420e8d46534cc7cbfce65af10609f0656033be97ac6502dead99d87d44dbb3543abf7a7906a9241e20ab4ba6087efc1a161c273ab86cd54735941cd01c8d9a16633249e850d18da15e709121d679526b73f28084f7b5f74d57060922d62c2b2be064b8243323c80940a19f6b02581877e2d8d6f96f9c1a310dae0f39d2a6ce89edd3ba8b91dc7aeddf38cb58f90f6f877614a6b446fb166dfde89ba9f36dde3d4ca0a04ae6f6f1e2abaa74de7a4114c12e2aefdf22bbe1d8a5eef6c63357e7a504799006a01fa339b6f5c8f461a9b0ce2f8d1839015246eb1a8c23f6b23ee8ae3131d5260043102b044f624b14b2def25c3c205db39fb9854839afab25456f9ba8010dcb529d2557f59c24ccd91eff2a0aa4bd82876a674a490bb8fae03e4960aa4a8a1ca91758f7905007ac8ea97a8233a770f9a6eb15605ea357684b10d3a12eba2e09f414957949cef00eff2212855b0b134cd942f79f172718fe21a8315e0333909f6139166ac3c3766b3553a5f0410613b6353559ed49b7786be7043bc6e636734e0f82a3251f9027ad6b130f6467f65e35236c9ff660bb542a8d5a1d08c270c9f5571178"}, 0x1012)
setxattr$trusted_overlay_nlink(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='trusted.overlay.nlink\x00', &(0x7f00000013c0)={'U-', 0x4}, 0x28, 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000012c0)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0xfffffffffffffffb}, @in={0x2, 0x4e24, @broadcast}], 0x3c)
r1 = gettid()
r2 = request_key(&(0x7f0000001400)='trusted\x00', &(0x7f0000001440)={'syz', 0x1}, &(0x7f0000001480)='vboxnet0mime_typesecurity)selinuxnodev(\x00', 0xfffffffffffffffb)
r3 = request_key(&(0x7f0000001c80)='encrypted\x00', &(0x7f0000001cc0)={'syz', 0x1}, &(0x7f0000001d00)='*\x00', 0xfffffffffffffffe)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000001d40)=""/138)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e40)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x34, r4, 0x700, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xdaa9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000894}, 0x4)
keyctl$instantiate_iov(0x14, r2, &(0x7f0000001bc0)=[{&(0x7f00000014c0)="5685c56961173aa64e567360e6ff72642ea2", 0x12}, {&(0x7f0000001500)="9128f9516bd9d200eb57ff3e6cf95d5272b9dc1cde74545d5ba7140a48cf64c26cdb8720b5260575bab21deffca992be854e0c121765404f5e13a7a94a61664c8a867daafdb8f2fe5026257ff0fed3d43ec9c48be255f9c1b92293f11fbc6f333ddbe48934738aa6afc1810e08115e0050fae869668f8c1a83eb26b8e4abf6f9839acd4693ae128bde849f7d2c9a9cf4aa0e5bff5a4b593f8d95fbeccafed22037c5b540ee30e6dd2127a939468fa5a5b6857dc543ccac80ef20e83a2b2cd83409538461b51b011000051ef418f6d7acc08876bfad8425f02e54763920d8497e87684349fa46dc64dd4b4e1fcd58", 0xee}, {&(0x7f0000001600)="78c2add6180eaf86ef100e4a93d0e8342de1d23ac208139c874217bb9126911f5b719e569676fa3c31f2d42f8e8e83d83a9e70fe732f5e9f32303fed0bdc2143e56bc1f245a0b74f628cbd13ee252362c5d82cd5d80dbd1868e8f91438c883a11e6ecf11965900f2d7983e9ef910e166cf8b8fc7e7ba1085bdbed4ab66a51713ee9764a294cdde204755df90f2f57d5233085895207457f33d2688fc1eb1206c1a", 0xa1}, {&(0x7f00000016c0)="995f208846767ca8cf7a6285a55150bf059ab80f08498208594c6cfdac43f3953af25fa8b7c3d4930b19b857ab9dfcd0bb2b78178157281c164b0b0bf0b00f07a10425f429072b36f0992297f6ed6a07749d1188d4bc549c44fe491aa52d7ac24e72074fbf256d28a3f10655cce14bbfcf250792b0d7eb3d9588806c80d48e9e46d2d77c48d7062bf231f0c8dc3cf445ad08fd3d049c845c5f98d1da8fd8aa052219156d306a047f81addc3b027e58ae648f9fb261b812837c4f3d5d08132fa035be0c307d968b249e275aac9a70daa8e3964457f1150437fc4b839a43ec69041c4515b89ac807a3102812f39b0e4c8ba70a88913e", 0xf5}, {&(0x7f00000017c0)="22b17bcb5f451fbed670d36a9be770e9626b3ca6eac44865e798b047aec5677a7ca4b92b493034a5b9c654daa2f9693f788d8948e13577661fe1a1202ac6cce5f10b69b34015038b5dd6af633d3a3bd31310cea5d83644bd1a2de3a993a633c6d2e44430f3f548b560b42ba784c087536f64350fcfe51baaa82c932ef9f96cfccd49a78bd29224186b", 0x89}, {&(0x7f0000001880)="7aea031816c991d4f1e28aaaa057d2dc9a3ceffd039ef1783f9ce9786b9d3752b33dbc5da6de203a", 0x28}, {&(0x7f00000018c0)="f1e287f760bc4f385d42df4e54feb05571bd13158fc26f02a55365846a3edb4ef1a9485b947394511c4b2f46b51d39c7701eddd3754ac64593c57f23be39b4eadd337ae448e8dab51280316cf75e5c01912b5f59ea1efc4a40ae451340a48c1af8cb94883b5395fca9b2e60d5b15b9d5dfbee78a87dfec64608b5d0a89b6d8f81b60ca4b119977a5cfe58fa078df46d80c34fe02e9760a56bfdb6e5e9cbb99ab24ffb4caed8ac6365a84337ce8f1852cdd1c3bb6291f0f4f03413469e98243b54d5018c434f006c8e09fdb62e252c27a569c08", 0xd3}, {&(0x7f00000019c0)="cd8c771686a15328ce62e043e467967fa307196322d4828500e92caec54bfbe4c672df972536e866a9a35e167d260b0e08da005bf0f8c667989b2164e9d7b6862977db4e48351a35496f2496c4a5c566aead972ed4d2053fcc7995c380c4a36b7ac0444d3bf723f2117f74791c1ad812ce22a52c9759b397e4b90df749e714b2ed5937c05c6d6f75b60b6521ca11bba2317fc790eba21c54d32c50b6d8c505d1deba9ad10c92a7cbef61b876023f7c9ce42461ab0ff84d7520dc14607682e5daa01bb5f8f7833b862bd18017bc904020c8937870563abde2db578195d21e65d4fbaf99c6c0da66ad39ea1376cc8264ef868a", 0xf2}, {&(0x7f0000001ac0)="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", 0xfa}], 0x9, r3)
sendto$inet6(r0, &(0x7f0000000040)="6e8af4fcbe576c719bcf1d41859bdb449a88e32705104450a9e913a3ff140f6e3504f036b548c832c37521be3f01cb017e99bdcc3470b546c14e7d25ec925c3a483f3765408e948482c9ff79a9ef3d2b203d3bf015fbf30d0b7fd215a72bec6c95b2b687cfb28deffb0730c949a5042b9c283b469ad5f121942586c8e593e195ba0a41d6882be2c20dbd81798f3ad29079b2d9a7daa023f17b91a4408a20c2c0a87cc809d5526aee671d5494e8516798a00ef38672181f08120e9191c1cb3c046417c4039c41ba47e9a8e0b0bb8019605a547a98945d81eae31f52e30d702cbae5cad8b93b61433a052a7296b1dfaf06b10efd67f1dc2aa3e0", 0xf9, 0x20008000, &(0x7f0000001280)={0xa, 0x4e23, 0xa3a2, @empty, 0x8}, 0x1c)
write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, 0x5, {{0x4, 0x7e0e, 0x2, r1}}}, 0x28)
socket$rxrpc(0x21, 0x2, 0xa)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:17:57 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x800000000000000)

[  692.483648] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSCTTY(r0, 0x540e, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10004, 0x0)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x9, {0xee6, 0x6, 0x3, 0x5}, {0xfffffffffffffff9, 0x4, 0xffffffff00000001, 0x80000000}, {0x5, 0x1}})
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$RTC_VL_CLR(r1, 0x7014)

22:17:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x34000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000100000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x0, 0x4)

22:17:57 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xa00000000000000)

[  692.787911] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:58 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  693.159071] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  693.186731] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:17:58 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:58 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0x5, 0x9964}, 'port0\x00', 0x1, 0x802, 0x6cb, 0xca5, 0xfffffffffffffa7e, 0x273c, 0x6, 0x0, 0x6})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x30, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040)
bind$isdn(r1, &(0x7f0000000300)={0x22, 0x7, 0x9b, 0x1f, 0xffffffff}, 0x6)

22:17:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x204, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x18000)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000500)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0xc)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000380)={0xa0, 0xfffffffffffffffe, 0x7, {{0x6, 0x2, 0x5, 0x7ff, 0x886b, 0x0, {0x4, 0x3, 0x8, 0x4, 0x0, 0x527f196, 0x400, 0x76, 0x5, 0xfffffffffffffffd, 0x80000000, r3, r4, 0x5, 0x9}}, {0x0, 0x1}}}, 0xa0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(r2, &(0x7f0000000480)='cpuset.effective_mems\x00=\x00\xe6\x8a\x126j\x97\xb0\x87', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f00000001c0)={{0x2, 0x3, 0x1, 0x2, 0x4}, 0x7, 0x5, 0xffffffffffffffff})
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2400, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r6, 0x8, 0x3}, 0x14)

22:17:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc00000000000000)

22:17:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1000000000000000)

22:17:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getresuid(&(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
setreuid(r2, r1)

22:17:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:58 executing program 3:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'teql0\x00', r2})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000400)={0x0, 0x56, 0x6, 0x10001, [], [], [], 0x33a3, 0x1, 0x4f64, 0x9, "0ff3d70ed2afaf87a7d43170f37bfc12"})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', r3})
ioctl$TCFLSH(r1, 0x540b, 0x100000001)

22:17:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1300000000000000)

22:17:58 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$inet6(0xa, 0x7, 0xcde2)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffc, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]})
sendfile(r0, r1, 0x0, 0x80000000000d)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x3, 0x8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:17:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={<r1=>0x0, 0xd6}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x1}, &(0x7f0000000100)=0x8)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))

22:17:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00\xaf\xa1\xa3\xe5\xae+')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1600000000000000)

22:17:59 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, r2, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00')
sendfile(r3, r4, &(0x7f0000000000)=0x100700, 0x10003)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000080)='/dev/dsp#\x00', 0xa)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000005c0)=<r6=>0x0)
r7 = getpgid(0xffffffffffffffff)
tgkill(r6, r7, 0x2a)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
r8 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7fffffff, 0x0)
bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
fchmod(r0, 0x80)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0xffffffff80000000, 0x8, 0xc9f, 0x6, <r9=>0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xf7b1, 0x0, 0x3ff, 0x6, 0x7, 0x2, 0x8000, r9}, &(0x7f0000000200)=0x20)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0xbc, r10, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff7}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x41b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f73}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20004001)
accept4$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c, 0x80000)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)

22:17:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1030000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:59 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1900000000000000)

22:17:59 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x1a00000000000000)

22:17:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:59 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2900000000000000)

22:17:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', r1})

22:17:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:17:59 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2c00000000000000)

22:17:59 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x1)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:17:59 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x101002)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./bus\x00', 0x80, 0x2, &(0x7f00000011c0)=[{&(0x7f00000000c0)="b4cf68d5dc442b1680bf88b06245399bc7008b8cac634707d29cc2d6d30cda1aff18c48107ade870a77f156d883f957de3315a95f3793178a7f0272e35543d21d5b841250e3268ec7d1ea377f96bb32160365b8d30ddc3792617f4cfe2d5f0c29e4920b79349aa29a0c8b495916388d6b38700d35437996265adf9c896f71f5004f2abd247573ab02cb669906399f6194df36ba194bf13cf281f9bd95c6eb11e1aab707053917b47a90d7380f6861da9a6646c5db6093c5c51d5bde0595aa4e93a64aa3f9821492b570f93a4786b8816064eb52a1a38acf672229db9c5dba11a686c6feeb62a5088214cfe5f219cf22e13a43917cfb91af21eb05b60eee148f40a309535e4308ef5f4ef98ed8f6dcc0dda96744ffa0544d69a36b5994095060077ff86d5b47564d280c1655255c66fe7f84e8dfcab252a2b2bc86b4676f47213a8f874f96e53e6ec36ddc698af4169155c7e16958701a016b38c5611ec90612708f42fdd40f01357275912431df13d05cb2f91e6d8ac71efd09111a1d76c84c3feea8a0065f7c911e9b40eb20f7d7564bd935a01cb7fb65c66a2e136ee020527851b70bd8de2a7fb460c1e57194d2a6e062e1c4fa16e7b200d7f1e6e4bd2d7b60c52f4eec90c04045b9ee211ef29fdb5af1e8f2d30c7cf6b58f9c8b715655e21bdbc9eb78982446260890915572a0986f1b36bfc4594021cdba612615e89301d7e1782166e77d4a26f4da14b7ea5de5d163a91ee5b59d907c62998a4f22b5cadf610faf6c520c2a5cc406481de0fd501640165c84be9e22f9ecd1ef22a1be65ca556423eb7b09163f4b4d2643f51ef1cd55068ee1fd036860e0e4cc0cabbd41ee4c554f2dab31721d63c3cb857252c29289481dc4187f8e5f4e92fe550f80c3c1e90b19993c11c196fe5fe9ae06cea67f5587f7d7a9670710110e343074c9f4a1cffb86933346b347b0a1adaa1a123655ee1a8a09b515ccd123adc002d0a10c9b826e6af984c981be9c115afd2d3a98b3d0c264826626f69b2556778080e7a02a85bf0d7856a78fc21c1892c500c7eab15285d33779d526c81fb626684094924326223be8ec0dcac2a4e2609e87b33d781eb75391fabd426772c2dfaa6238f18c1c1792910a48531165ace10107a4262fbac3b142e721635c769f9295c7f2a3e6ed3ef1cf29c71037c9d2c408e1c4afa00de6d12f8d1a3b0144f15c1468846f94c6b854d1faec62a75a7fbdc2d97c9afb458144ff81f8ab1588bd57c4e5d26a429af693552a55a78a65a3b85acc0df048bab8c5cbfbeed48e2da2b758f537f92606a52eed06082a64fc8a992857061fbc93395406ad44b1fc0d11b066b03c92c5a8dbee891aea88326257ef9f26a0fdbf9490cbe5c0a3b68acfa62ec1c5697a875c70d8c40f073581ec00776f67e733796025cbc563cc7df9e02f7772e563404c785e6eb151e999879a0537cb3ae774f534eb2c52d09e1e92b48bd71dcbf313f2a75da3e4624af30c5593d1d24a4d83e3651efaaf1df0fde2adf11e4766e9cff1f9a64c59673d476bfd17f505466051cf1d9cf34b0f4b94da98eff8ac9bf3ac91283f5dc8acd7312fdb59b946624e55c33de59e1a7f9b58c540e4bed088944bfbfae4ed96fbac456f1bc0db38c235f8aa58e77b51e34d4f846c54c66a1931c845acdea440c5022e1fcb43f6bc77e6f55e3c95871bf06e790b49b88734e5a8e46c01d266ff481f6225bfd8a732c982cf1c0db6a007089949c6d550bcef1fea72d6baae2a0807924aa4eab94435807be8c01f4448722b061756802040ec395c98f374f6b90f1c27042e9b8dd991952bb92e67026823c71ebacd355a18187c3772f7639fe4b11c525caaa40f89045854a6f4b50be00a1b58e62852cd1462b9ea78199272874146adc31a0b40b62f0f51ab2287dcddb62e8e055722237035a9d8b387e15975ef58ca0e39cd098e706fd96bbb488bc14875ef3ea3e2bb041b7f53da61ead076a852c2acce6221f5b684aec3f6cfbc27d4b85f08cc0ebe66a33b761ce5e95ab6a51903851957205db83eb8e1c63c8dfe215af003731127685f40d78bbc06916772085315d38b077b60a1709439ed46c1e8e7f334eae317ad8d1523d56a12a11bca5ca023bf6a9dbb88ed10332d9f806a15f6dc106857a212396d89a1ef653e315e8a557b03d1294897e259192c3cc90d5653de1311405be499ce27e1520a558b731e5f511d1514f93ec979f707983f85a564d2ed1c50c2c14e6dc2dc03659dcfef0150dac228ca3c8c59fd63d83f5e47eb0dc497a34982c39b825fae1370f68e3fafc8159f5c69eebb1d1edde8631dac568d776cc2b594274a7373cc1318ec70239378eb9447c48d4e6903473f70d57f949950a55abf80695ca05490bdad1c059f120fbaf5d3f3c3ad039d353a72dca5c5f0bdde2e095fdcf9abdb4a09f58a469af89c2feedcca6dcaad96aac991a4abd70d512856c839e803f4ed7c9f1edaedcd953d5250bbbe506fb30dde3e418df30f07ac34800430f7c4caa555d00c33c13f2814ebebbc4e5e8a2052d7de84ec5a21cd0360c4cc685e3e40d6b52b0e93c84575b5f3d2e9e78ebe2c9d43ff18aa5c941c5816267dd1f409294c40a1b5b2478d37af77c7d5a50851ba5692fb47be1ffae528a76af269a665e8e2f0d8cef86d641211e33331231458c74b8e0515d91a555e6a854ae974726af29016417857cec8a8da2200c23e988faf2a78811f08e68b7c79913e516c274738d11cd9b20816c6326c7aa0ab75af78ae4b77288a7ad2341d1756ed1954396d85c7152683f8cc0e900ee79b2787c03cc317969285b6d2cc8a373002a9d0e5dd2e780885aa184d0ea9ba2f9a78bdf07ca2c8e44c4b46bf961c9df9610f12518be5dfe3b78908331c028cb59bb051e9368dac6b926e0a652c3f3b87fd03149d9f51ac1eee7ffc6e5284d2e6ebcc47c90faed5009261c07ca048baa0d6ea877493e1f1f756903464a944400780c4295ad1295c69e0222fd83e595817cf69e7ee65db5c45f829891c9a40602c88843b0198bef20f2da1dc5eb1323533338f25cce280a89d885aa15c28b4af87aa5fd2a34bd4e9a7ae80fdfd239b95e682d3938d06528b2dde1eeee7f7ec474bba089de871349ca94c3809f3248ada0fc4236f1121c85c6ef81f18aa71fc32a6b347081f568c63af8834304f4975fcc1ad3f5ec233b08f2aaf7f05ea663575cb87d7372f4ed065b7895b19bce66f5f04ef1ad21a90c14386915840d5c195d793dd64c2cf55191b0a66942ece23c9d0babeeb9d4b8501d7b6611ca4a55db85f1a54c760ef4b35fc75b0931bd37bb3ad29af25a44bcdfd2b742f6d4f9e11ddab0b5c853af737a1b03048e493337c5578d00bb1bbfe25767f3c7623f35ef0434533c41dc8620ec8b33acae473aad9adb124f8f0e269427f741d0db16a11c47736081d2b1dd3f98fd4a7b632b7457880cad5f57c43ebcc88259b5d60c87b34d3135dbc27dbe5475ce576759c2ed9dd1093b23e23bf03c16425657844956e05367e0d30e747c7d86d465184d1297e08dc717d9027c97311f692a517d00308f813a7fd93ebd7ee615e291049a8658156dfd6b42ce3fe7e581fed4f698171efff42ea0fa054ca4ac8ec486c110c2a74f2d8fcb4bd219e30452c2e319e6f603d5e22b17be246abca0eac986a4c27ef713f94f861b435ad3e1db33e821fd8d02a7d25d337a26d1610ee96e177bf661ce5aabfd70c1a6ee6b6dd179577b94117bf36091b14806daaf27bc1e2019a80891f9e2bdb4246e8ab67c3bae791aab742c62fbc949ce130b9e2182770068ede2e1a6a8f180cf2a49fb1b5fb873b47eaa76089b8885b9a2ed7250528f205bd7d4906d48ceae2c7a40641c0a392dd9ffea8c92a3d4d1c36693547b2b3635307449356903a69a19c56b43a58810adebc363d5222a8641bdd72db0547fb9e413615dd26948e0a2ac12778de30ec8c073f28905d6dae2b80bcbacc7fb2e4b939777374967ac952ae331f65ec13155b308b29b6ac71258fb00bb540f4bcb8cbb675debea9a34af46eab3118ef8a9dc747d9420255a6a5607038eb64ec0e736ac7dd3985c699cc3ab2528487b6e2321d72c0003bde8b8243a460ed2e3bcff811fc0be81f4b8906b3c9f01db93ff44388432e4f25e6c7fd462009a7c7f69dc0309824c69ace79dcd643b2957c87ef439baf73de7c4fe8058a64922dabd763762bc02feb1e23b60288941d562cfc9b84556839b0dc495a29c0bef08006150a73de6db213a98276db52361d28d287b726d07104616657cdc64286ccaa3aadba2d28c101637ba5d2fd8e5998116ea78d7d86fbb1fe910209b7ebc652ad1cb03b1662f1a36e027d6df15059b46bbe9de3e85a317e1cd189cce8c683857ad74e595976e011b4a7bf88f2a31fe7c52852eb4f6de38678d7a6cd5b38884a731f7a4db3be10f03ed359358d598d543769bcfbfbc2d4494f19750973dbeb071cdf50a32a9e2e8efa853eb77836f0c60f1d7367fe39b06b6c156d6e4a729600abe7c7dc9cadc46b1db0557bc05efa65a6e5d5a9dc42406104e107f45d1488a0d8a66b1ec0bb5b1590b416ffbf01a4d378e488eef8ede511479a542cc1171901b84898ce8d95efe8b2c06a75256c0797abf7d9cfe215892504e9c93f0b784366c71afaaf373d5f5f227bc0e6d5d3353b6c6be099316860abb8c4056e6b5928887f3663c07f7344690b05659ee49aa36a58eedd63cdf402e04c273caabb1d96c2e9b37151573b6176016361b4369a52ea49a52fcf642823164f06da67ed1e7082b2ca704e799093f953af7c34c77609bfc3515066c9caed39809c3107510e164820b72ca1b5253a47cde5843e6c120efa7d08e2660e6b195835a70654373832b606f3ca3c23a4af8f1a15c8a862a92dd7199b7265a3e487066d63670adc3087e5ca82f45914a42f79f6cb7ad42f0f670d388f989d2c438b6b417f3f994363728201b4b47100f4f9cd2083235ae09b1726bae84cec46d0b42f1ea99857bb5565bf5f929599f08a4a4fbfc363a6154f2ad8e35efa4e4ae6a12dcb7263c6614a7562d743df66b501884bc9ec8a07f70f667ea57bd1f825e7bcf545445f8f6f939b33607df941322bb61689ceae080ce12abfa5616aa821c83fc2ec692137f6bd670d14e76f5ce835398691e4e9d7f646a691f16a47edd57552929a65a924108dd8b6cc738c76d9bb6e4b4bfe0a3257aac28206be9b04fbe6a3472947a27d04ffa789c1bb623bdcee7cddfff53ff8f7471ff7ee69ef199a073b2856c0d323e0eaf390f693d93613b4d4c5e9c698e4646994cf4f878ee01bf8fd7e936bd4eea00a1683dc8932c33b5ac285f08026b7d03429719f851cb2bab16065e29df16ddd76abc31e82b4e99a1b3bd1ef641558b6b5bb1c95354c71dc40eb4f30b7b7b0ba9dfff38f5e7dbaf9a5fc31e1e26222d8062dee476022c8449a22cfe61e094b2f00012ec74e3a6f9e05c06fc5afc974fb673b372b3a4deb66cb40bb0052fda9705057f1ca9010a1e57127624ead40071b3be8c379057090c558e0f25a975355211edf15d8553ab76129ee5d980ff48dcec3e821a599d75a6adc9bba7278a8b55ffe6dbc35880fe2405d6ca4ba9b0be90757d9e12ef17ad6640004cbd4da6d2d0777d9d2c26ea868ba2e009ec7c2f5aaa9faaab6e2470a92f100fe55521acde9f27ab1b5767c2934155640bb5417aa3100bef4838cbeff312e54a3082cf6d45de012fa307569b140675a307a7bbb4654170b5dc55e80e868ce1121a", 0x1000, 0x8ae}, {&(0x7f00000010c0)="99e51160bcae21abb9be6c0219b288317fb99fe85013da1218ba5864a982fa30bd123cd4e6753530978f9e64636cc07143a81304234ef095e0774da51169ad9b0d44e65a11b008e63f912f8ab294b50c4ee6b8896aef2d4b273b151809ec007486c35a24d94aaded4af4a54979d8481aa5d50af1e2f23a1e78f542159f7589f9eeb198610e325791080b5967abe032da03021ba8020490debc2f2966e64fec89e5e630b9d9696b0cea25363ae09cb3d0a5c8dde0cc0aaf460f7062872a1673a6ebdd45e6f4c3a535c5d2594b4fcb8741171251ab8ad69f30684af20a838c64efefadc2fab22a2fd5cefdba5001ae89a64734b579282873b5", 0xf8, 0x6}], 0x80000, &(0x7f0000001200)='/dev/amidi#\x00')
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001240)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="1c0000005db36f4c10b01bdd7d96be9bfcc37a4cfbe8be52da459e14638fdd20"], &(0x7f0000001280)=0x24)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000012c0)={r3, 0xffffffff, 0x120000000000000, 0xfffffffffffffe01}, 0x14)

22:17:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x80000f)
ioctl$KDADDIO(r0, 0x400455c8, 0x101000000040)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:00 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x2f00000000000000)

22:18:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:00 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x3800000000000000)

22:18:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  695.695921] validate_nla: 9 callbacks suppressed
[  695.695933] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000002c0)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000280)='map_files\x00')
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e)
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
accept4$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', r2})
ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'veth0\x00', 0x2, 0xbcff})

22:18:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:00 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4800000000000000)

22:18:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:01 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x1, 0x40}, 0xc)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/148, 0xffffffffffffffec}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')

22:18:01 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x4c00000000000000)

[  696.142957] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xa000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x34d, 0x800)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @multicast1, <r1=>0x0}, &(0x7f0000000080)=0xc)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, r1}, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net\xcafib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40080)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000580)={0x5, 0x4, 0x2, "739bce12a5d380c6cd84c61eacd7b61fd9ddfedf1e0f014883c37dfea4083f91", 0x39555659})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={<r2=>0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}}, &(0x7f00000000c0)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r2, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x5}, &(0x7f0000000140)=0x90)
ioctl$KDADDIO(r0, 0x400455c8, 0xffffffffffffffff)
timer_create(0x3, &(0x7f0000000500)={0x0, 0x3f, 0x0, @thr={&(0x7f0000000340)="2a4052f63d0fa8e98c8cda5d2d8ee4bc2a4cd2495364d17d71d6e6f870f0358e11f046407a843523c12a7d1940bd46af3c2fd3fe9ea666f34a39e6202ecf63a8ea4e533a48c29cf37a324fc18a75c938ea1130bc6c7eedb40955604c5024826ceb0948c0c83482b6b2b08ebd4875e732b64dbbff804da1d046591c38f3f168f6d07e2c199d5893d5dc96e687bde534", &(0x7f0000000400)="a0d99d311416c16e643f872dc700e768a81850ce694ddf9d565d47c83c2a13d08ea9e61a0cbcff9efe96cf76f333a7e0a6296aa3d25f3fa120ef7d99bb7757e6cfb70207c3799b4b3178d25364e89380b2514b313123e9ff7a3169dc4f901465169701cebed6308ed4692290b67b962bcffc603d55cabcba17d83b3b2caa9efcf0027de4e3da5a8008d76f020622d538b29784c0467a03f32c4dd987ae28dc2ec959c3f6f334fb15b570cdf47897e109c9c0b7aceb5625a250a11b35ba5a9f09200035c1544e"}}, &(0x7f0000000540))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:01 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6800000000000000)

[  696.431361] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xc000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x7, 0x2)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:01 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140), 0x4)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x0, 0x6, 0x9, [], &(0x7f0000000040)={0x990a75, 0x6098, [], @value64=0xd3c}})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  696.552732] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:01 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x6c00000000000000)

22:18:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xe000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  696.673919] print_req_error: 353 callbacks suppressed
[  696.673970] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.685710] buffer_io_error: 353 callbacks suppressed
[  696.685721] Buffer I/O error on dev loop0, logical block 0, async page read
[  696.698508] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.704992] Buffer I/O error on dev loop0, logical block 0, async page read
[  696.742679] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.749238] Buffer I/O error on dev loop0, logical block 0, async page read
[  696.791259] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  696.801365] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.807896] Buffer I/O error on dev loop0, logical block 0, async page read
[  696.841718] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.848267] Buffer I/O error on dev loop0, logical block 0, async page read
[  696.863802] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.870335] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:01 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7400000000000000)

22:18:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  696.902485] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.909030] Buffer I/O error on dev loop0, logical block 0, async page read
[  696.965228] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  696.971765] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.026929] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  697.042561] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  697.049111] Buffer I/O error on dev loop0, logical block 0, async page read
[  697.105030] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  697.111573] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:02 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r1=>0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f0000000040)='net/fib_triestat\x00', 0xffffffffffffffff}, 0x30)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/l2cap\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)
r3 = gettid()
ptrace$cont(0xf, r3, 0x8000, 0x4)

22:18:02 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x7a00000000000000)

22:18:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:02 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x1)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x956, 0x400)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  697.347493] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:02 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0x200)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:02 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xacefff7f00000000)

22:18:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0xfffffffffffffdc9}], 0x22b, 0xfffffffffffffffe)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
fdatasync(r0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  697.578125] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0xc000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x102, 0x4)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f00000000c0)='posix_acl_accesssystemwlan1mime_typemd5sum\x00', 0x2b, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:02 executing program 2:
r0 = userfaultfd(0x80000)
r1 = dup3(r0, r0, 0x0)
socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
preadv(r2, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000003440)=""/96, 0x60}], 0x3, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000000))
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x3, 0xffffffffffffffff})
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000013c0)={0x0, 0x0, 0x2080})
clock_gettime(0x0, &(0x7f00000000c0)={<r5=>0x0, <r6=>0x0})
clock_gettime(0x0, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0})
utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={{r5, r6/1000+10000}, {r7, r8/1000+30000}}, 0x100)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x200, 0x200, 0x329})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
gettid()
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=<r9=>0x0)
r10 = syz_open_procfs(r9, &(0x7f0000000100)='environ\x00')
preadv(r10, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:02 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0xc800000000000000)

[  697.735892] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:02 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_open(&(0x7f00000000c0)='net/arp\x00', 0x42, 0x40, &(0x7f0000000100)={0x100, 0x101, 0x5, 0x47c, 0x6ace, 0x4f, 0x8, 0x3f})
r1 = pkey_alloc(0x0, 0x2)
pkey_free(r1)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
fcntl$getown(r0, 0x9)
r2 = gettid()
r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/arp\x00')
preadv(r3, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:02 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40002, 0x0)
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x5, &(0x7f0000000080)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x400000)
ioctl$TIOCNOTTY(r0, 0x5422)

22:18:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = socket$l2tp(0x18, 0x1, 0x1)
ioctl$KDMKTONE(r0, 0x4b30, 0x8000000000000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ftruncate(r1, 0x8)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2)

[  697.971850] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x100000000000011c, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='netY\xa2ib_triestat\x00\x12\x94\x94\x8e\"\x05\x80\x0f\x03\x12\xa8u\x17\x7f\x1b\x84S\xd27|,g\nHW\xc4\xbb\x81Q\xdbo\xba%p\xee\x03\xf5\xab\x92)\x94\x81-\xb9^\x93]\xe6%\xd8\x9a\x01\xb8\x85\xde\x99\x80A\x16\xcab\xe5\x7f\n\x8b\xd8\x90}R\x1a\x9dg_\xb6\x8d\xc7\r\xca\xc4S\x00\xbc\x1b\xf0\x8c+[y;P\xa1\xec\x8b\x98\xab\xc1\xd4\xb8\xdf\x1c\'C\xaapl\x85pz\xe6\f\x87U57\x90\x98F\xa4\xd6\x7fF\xd7\x8a\x8f\xd6\xdfs\xad}\xb3\xbbP\xda\xda\xde\xb2[\xe0\x17-y\'K\xa90\xe4i\xaeQ\xb4\x8b\x14\xa9\x9bm\xefp\xe7\x15-\xcb{7^/\xba\xf7\x86\xb7\xb4b}')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:03 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000001240)='/dev/usbmon#\x00', 0xfff, 0x42600)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000001280)=0x80)
preadv(0xffffffffffffffff, &(0x7f0000003580)=[{&(0x7f00000034c0)=""/148, 0xfffffeec}], 0x0, 0x2000000004)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000100)={0x400})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20881, 0x0)
ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x4804, 0x29, 0x4, 0xfffffffffffffffa})
r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/142, 0x8e}, {&(0x7f0000000080)=""/80, 0x50}], 0x4, 0x0)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000240)=""/4096)

22:18:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x301000, 0x0)
ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000001c0)={{0xb5dd}, 'port1\x00', 0x8, 0x0, 0x10001, 0x9, 0xfcaf, 0x3, 0xffffffffffff7fff, 0x0, 0x7, 0xb7db})

22:18:03 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
r2 = getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8, 0x0, 0x6, 0x2967fe57, 0x0, 0x1, 0x28, 0x8, 0x9, 0x1, 0x4, 0x1, 0x3, 0x1, 0x2, 0x90b, 0x5, 0x8, 0x6baf2d25, 0x8, 0x7, 0x3, 0x1, 0x4, 0x7, 0x1, 0x3a, 0x80000000, 0x187, 0x8000, 0x8001, 0xea, 0xb3, 0x100, 0x0, 0x0, 0x0, 0xae3, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x800, 0x3, 0x4, 0x4, 0x800, 0x1, 0x9e}, r2, 0x9, r0, 0x8)
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:03 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000340)={<r1=>0x0, 0x7, 0xe5}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r1, 0xda2}, 0x8)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="a801000064b8573635cd24ac547a5e85b7d37ae04b1d4faa7614333bb9921117d26b4be3ab684d87dcad999cc8aa614a157b868acd37ee45ee798fe02b0afad23524eccc9852785958b5fc9f1082baf18d15c26a8810aa1a01dbb7", @ANYRES16=r5, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r4, 0x2008000)
sendfile(r3, r2, 0x0, 0x7ff)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0x9, 0x9, 0x22d, 0x436}, 0x8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:03 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:03 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}}}, &(0x7f00000003c0)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'caif0\x00', <r5=>0x0})
getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000440)={@broadcast, @local, <r6=>0x0}, &(0x7f0000000480)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000a80)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000ac0)={'vcan0\x00', <r8=>0x0})
getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000b00)={@dev, @initdev, <r9=>0x0}, &(0x7f0000000b40)=0xc)
accept$packet(r1, &(0x7f0000000e80)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000f00)={<r11=>0x0, @initdev, @multicast1}, &(0x7f0000000f40)=0xc)
accept$packet(r1, &(0x7f0000004580)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000045c0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004600)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@multicast1}}}, &(0x7f0000004700)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004740)={'team0\x00', <r14=>0x0})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004780)={<r15=>0x0, @broadcast, @multicast1}, &(0x7f00000047c0)=0xc)
getpeername$packet(r1, &(0x7f0000004800)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004840)=0x14)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000004940)={@local, @multicast1, <r17=>0x0}, &(0x7f0000004980)=0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006fc0)={'bond_slave_0\x00', <r18=>0x0})
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000007000)={@empty, @dev, <r19=>0x0}, &(0x7f0000007040)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000007080)={'team0\x00', <r20=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000070c0)={'vcan0\x00', <r21=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000007800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000077c0)={&(0x7f0000007100)={0x68c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfa}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0x298, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x720, 0xff, 0x400, 0x101}, {0xc00, 0x3066, 0xffff, 0x1}, {0x3f, 0xd9, 0x7, 0x56ec05a0}, {0x3, 0x2, 0x5, 0xcba}, {0x40, 0x7f, 0x15, 0xfffffffffffffffa}, {0x0, 0x800, 0x0, 0x10000000000000}, {0xff, 0x9, 0x37f1, 0x5}, {0x100, 0xffffffff, 0x401, 0x200}, {0x100000001, 0x7, 0x8c, 0x2e}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xd0}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xec, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}]}}, {{0x8, 0x1, r18}, {0x190, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1f, 0x8, 0x10001, 0x5}, {0x1, 0xede1e9, 0x7fffffff, 0x800}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x83fd, 0x0, 0x0, 0x1}, {0xffffffffffff6205, 0x2294, 0x0, 0x3}, {0x9, 0x81, 0x2, 0x7}, {0x20, 0xfffffffffffffffd, 0x3, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r21}}}]}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x4014}, 0x10)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x12)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:03 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = gettid()
ptrace$getregset(0x4204, r2, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/109, 0x6d})
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x80000, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000500000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc8)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={<r2=>0x0, @in={{0x2, 0x4e20, @broadcast}}, 0xffffffffffff8000, 0x10000}, &(0x7f0000000480)=0x90)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r2, 0x8}, 0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={<r3=>0x0, 0x7fffffff, 0x4, 0x5, 0x3ff, 0x7}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r4, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000500)=""/141)

22:18:04 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x5, &(0x7f0000001780)="0adc42023c123f1188a07060fe4ea2a6062240d222fcf59fcabe1265f5a8827a00d6a41f1b823e4011f628810b1bbfbcdf10d3694b1345b5b3d097892672ec53cc82089c5762840e893d4841baf2f588a5c4f2532df021013bf5c78333fd0fd585bc3a4ec3c0cd71354500ed19eada717aa77188788894203efabfc075e47cfd4d02d4df3e21ece184dcb28a4e9519cbdd6d21ab62ed3e663028a3")
sendmsg$rds(r0, &(0x7f0000002940)={&(0x7f0000001940)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001980)=""/198, 0xc6}, {&(0x7f0000001a80)=""/23, 0x17}, {&(0x7f0000001ac0)=""/12, 0xc}, {&(0x7f0000001b00)=""/58, 0x3a}, {&(0x7f0000001b40)=""/162, 0xa2}, {&(0x7f0000001c00)=""/125, 0x7d}, {&(0x7f0000001c80)=""/26, 0x1a}], 0x7, &(0x7f0000002740)=[@fadd={0x58, 0x114, 0x6, {{0x8, 0x28f}, &(0x7f0000001d40)=0x6, &(0x7f0000001d80)=0xffffffff, 0x7fffffff, 0xffffffff80000000, 0x20, 0x10001, 0x2, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x1}, {&(0x7f0000001dc0)=""/79, 0x4f}, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/88, 0x58}, {&(0x7f0000001ec0)=""/180, 0xb4}, {&(0x7f0000001f80)=""/189, 0xbd}], 0x3, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x80000001000000}, &(0x7f0000002080)=0x7, &(0x7f00000020c0)=0x5, 0x800, 0xb9, 0x1, 0x3, 0x10, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x200}, {&(0x7f0000002100)=""/135, 0x87}, &(0x7f0000002440)=[{&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/24, 0x18}, {&(0x7f00000022c0)=""/202, 0xca}, {&(0x7f00000023c0)=""/120, 0x78}], 0x4, 0x9, 0x6c20}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x4}, &(0x7f0000002480)=0x8, &(0x7f00000024c0)=0x2, 0x7, 0x8f36, 0x6, 0x7, 0x2, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0xc55, 0x9}, {&(0x7f0000002500)=""/208, 0xd0}, &(0x7f0000002700)=[{&(0x7f0000002600)=""/71, 0x47}, {&(0x7f0000002680)=""/87, 0x57}], 0x2, 0x6, 0xb5}}], 0x1e0, 0x8801}, 0x8000)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r2=>0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000003f00)=ANY=[@ANYBLOB="010000003d42dacb0caf7c8410c6b584aaa825ff676950a1b38d357031108a80", @ANYRES32=<r3=>0x0], &(0x7f00000016c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001700)={0xc3a, 0x5, 0x0, 0x8001, 0x8, 0x2, 0x0, 0x51e36b2, r3}, &(0x7f0000001740)=0x20)
process_vm_writev(r2, &(0x7f0000001240)=[{&(0x7f0000003fc0)=""/109, 0x6d}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000100)=""/48, 0x30}], 0x4, &(0x7f0000001600)=[{&(0x7f0000001280)=""/251, 0xfb}, {&(0x7f00000013c0)=""/83, 0x2f}, {&(0x7f0000001440)=""/23, 0x17}, {&(0x7f0000001480)=""/139, 0x8b}, {&(0x7f0000001540)=""/23, 0x17}, {&(0x7f0000001580)=""/127, 0x7f}], 0xffffffffffffd45, 0x0)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000001840)=""/247)
syz_mount_image$ceph(&(0x7f0000002980)='ceph\x00', &(0x7f00000029c0)='./file0\x00', 0x1000000000000000, 0x9, &(0x7f0000003dc0)=[{&(0x7f0000002a00)="d6076659e997d9b4a0a0a9881c0d26b718e88121394c2ae66e542eabaded341d19c072e9aabdd9e2a8c6d5b3b5bfb0b4bae6abade90131999d8771894ef12286488d944303d36de1fa81600916f7457ec1b93d81929858788f3212f8a925e3429009433ea0bb11c6582952d9c4d2645e9b95a7d3228c94cf80fc5d3ef6871daf49810f44ecd20de3a25862456ccdd5ac694d651fa5e570b6df3454fdaa68b1ef44f2370843d7d8354012228693a33f0a470cc325199370441c79ba467d44e6c8a6aa8d65a78e93d87c216a1ef42e61cfb44a03b95fa6811626151b23a97667ffc3385927d461b068ed99c05532f085e2b855974a47e60d7b8342ca9ee015b770f12b4cb0f6572d7457eb1849a89781ecf0f7649daab75d22c1b76a1595f737603f048a71ecb7a3e10119a81aa67037ced33f4c137d3e8cfe7d40516b50476c9ad47459b6bd709ac4df51740c303fb2e739f9c92355b93d56e78063a7e31b8f89d2f25af2da064522141e34ae38199f3298aab0f096cea0c5deb2e61708763ceec19c5ce3b30c0c79fccf7d3ca222af4f0e6f73e7fe23c8afe3ad20b7e4e46c4e17c8e307d853b69063e135f766ec2216136610b4d8f939d9070ebc342e122e0148cf1b09043544d51834fd5511600b5f3b9333da6401f3a3fa089b426cfbd3bce1a5ffc728da90eee6f0c374ff13fe1fe807bb638ed45cc29d5a428923c290201d65e696994d09c77554db92875cd78c1e75984d7e533a7253284a2dde9adeaa444768cdb990b5d0b266492ff72e268734de984dec92cd12035b441912bf5db3a101aa775a6bc91507f4c3deb03c682d81ecbe584d368b0dc52975547a0c6589efa052b2bb2f6dddf6910980b409d2a7725313933e04edb37642c9e29b6c36b8f30b935bae6fb1488cb4659cd7b82bf7d56c4945e4e4a5a9016e59cc2ec4a9f8dda3b276ba6b04c33044b636af29632d07544a769f30cb45c375dadf1d492eb31f56a5b070eabf92025ae880069271c996f0a23d969905c5d17573f3dc2e0f55e14bd71fad71e595fc5d4d071041a73d0a46c4a5ac98906f233aee6eddb00343111f0fff3b670a9dd5bfe0d52d62ccd72de08aff2a0a9225402f9b59d76e247e36abdb3fdb122bb794be463f5c406a92f44701c8733aa6dce5ce89f2a65e2de9bf8e066dae9cfbbaacc3b1760a97a11508384bf25e67e64d57d192a4f367ad5a58ce9cb4b07aabe3f9de731debfbf85680533efd6a18512f9561a69f77eb6a11acfdc5004be2e5eecd1f5d7053d33a0af83f1e10993a6e2e88de1fb6e34353ff6b2e2207b57fa985fb757a890ce0ace3f1a6c7082ff8c2ec4394eb99513eb335206247247ce453df63f72412f8bd7cc65ed0463b7f10b09e45e971f0f743813365f2d35649a31302944fb216168b7e1ec55433d6427520c9431c1432ec7d8fbf05ed4e9df86228f3515932555affc616aa22d4e8f8744011ac91f30fe85b6315a748ea8f356edfaa5a3d85acb9e3ce5f116a863f41cfb625bf2f01b33a2ffc4c38f30e2aa204298ccda9438906a47d16f07bf294410b5f9814ee4dd4399ab8bf7beecee43f672e5ba132641a00cbf4cbcff11b1b08eaedff0b430b52b8caa53d9de920f78d20e80496de919ecd9d739ff0454ab19318f5e84a11396f2fb086db0ba2b7787b634f75234cbcd0f34c71d5ec2986703d418c6faf70caf49672699b84445882379dd5b97d4d149fa324e6268933f686286a98ca222ddabf7e2f7670d1f12bf4ab30583d52ab8549a9223a569faf37b83bef4d1470ed1be0dbc0835bc278cbed424738510df953c45c4fab97144f64eecdc3a8ec692b38509e88b3e56c4fd345d3b807436b9411faa25a25fa054a8680293b33b020ce3061dbc939afabe98a33b12664b2820d3712f4e26d0693fc99bbc232734dc7bb17203909e88f35007a2dfc4ba93557f5c47a370672e59f05eef9eed28d6f8b3d8c3b8925492b76ab31f62d33a281bd52836892235c9a849fb1943133fcced220d137fcfb86322ef7b2f94e8ed3a1acfb884306d1c68f14569416e061b0a746b6f1af38a0a6caa389de36ebe924854d228eb6f08ec8e9efc241c39a88cd6a1a24ed8b8b0e3692234e3441680d5866ea7f9e2d93b9396eb0f002c52f195ee11b7262698dfd22a585c2b6ed37e575488aea7728c188a375018980fbe605337ce5f893a5030f85cbf95b74e1d321a30ce38e3d310d1b4f11b6b28a525583564d2ddd84093d248d8becd9a0d0233c3dc8ffd3e447ed59e8fe03dec0cda9d1efa8cf973f238f84a172f4e199911eeb26c5a6fa107220001f92b20ae873a23c5d55c64b05acd69a1b192d89952467ce7de8ac10ea451f57855b96fceb72c5e35961b0bf05bd988e6f948e93c953995bc0ca7816a9d7dc7a1177ae208cf305ae27e890f9cfc1debe90417ee23bd47e0ebd52daabd0f27b2c6b76bbbea4e621d8e830c95975468096cb66d210b9cfe3838c6349abc2ba29feae27d86e00c7595ef6a37723eecddd1a95451167687e287f8e812ed74355b5fed20ecf0c32f42ec45425b954df0d9a2a2328b95a0bb798bbbeb1cafa9837cae9350effefe19c4b6cebc53abe4dbc60848b2103e1a73583aec0a9f8b2272e2b777b2d3a2491dcc07151aeb61bb4bf0771b5aa77cecc0214e122fca2235b9b723a1bb6c259d06755c7d790f0df4baffad3e68be1854fbc2ba980c9e9d846a806fb942163b309be5f9a7e9eb6dd71c60e5806304420309c982a96db6ee8d1f9a005950291274f8c860da888858f36e3e1c4094777294d883faee37fde547307c751a32f476ddb2aa70c7d489066e75a17c458e222edb5d21ac359a5824dc1076add30500683a5eb03e0525f831be3beb6af31dc1e8a674f562d00a39f0067f59fa4aaa99ca67e48e0d926d5381f877bf65cc87597ad421edd534aa248470bd09c621413eafb1ea6406526d9d5b7862345007c595c33314aaaa4d2d545d8ebe1769af33b1106a7d74ee190dc1c5b1cb42b4d1d00eff111c8c135b9db982d437547aae6b734f7cab207485e08f535c95eabf7061511373aa489f8d3bb1e2e1059cb49e49c3e6cd8a53f82f7ada66ee183cc938681fa04832dfb9d627d719a245e20f6570a0e04eed96d88d26673ae0b607e42788ae42bb96d77acd24e83960256e30156bb51609cefc59c03aacbe3004aa1e36ad1b9dc9143f824f42a587bab06b19c1feedf0d5f7bb673250a65880a5a96d972bee4d0d73e46c4aaca752df3bf38c827dffcaa7d6dfd7e16909c6fc146b42fe5288cd77bfc579d2c0080081102a862d384333c9464f6c58314fbbd8e8b6668c9e624a3cb012acdc870859772af22f32754c75dfb8ba8a1474af934a5c9fb0bdf04a37a84d056dc63beb35fb1d2b3fd5cec0c22e53f8d165b7230783bdea06bd2a01140af626ec6f928028d6d9348e1060505f3d3861074be0d796cea70dd566be87de6a15b53002bf060ce9d0dfb47c0c0a58ce0439e4d4b1899255a2bcfd5a1ced9da0703bb90847489cf4a7d9b9af83be4b5930e344f3dc22dce46fc2ac98d3741a11cc8994565ed82118b07453604ce85c29bf1de76c2aa08c941ba5fb8cc640e0fa9f8a54d4f94f23682ab5f2cdc03e6345c5d4cee4d305aac10d48342109e084a32bc1be0fdf4e410768997575f2c9668012208d5e5bc66686328c70044f571e80fae27506b0661bdc4f86897b9cf6ac98fcee27c2c4c8b6856285f54d045de2fac52b8a844e64a6129456da5b47bab21c365a97cb29bde3bdaa72e7c73f39a4f40c292d7b8a3ba3b48d840b47fbd9c2fe6efc8949fcedf88b1b393c53a6239363d7e2ae24a03e5654d600bd0927cee25bef03de4dc484b7c83c85a1948b0b2b654a2795829e346dc9ba1d6b68cd5c6a38c0e4b1a9979aa522df675a1af0a721e591c07080a5bf03e2811460f65cca319465c4a90f30c5c6495589acbb8ffd309f0978e41f433452c2861b1b7c3db69fce9178078b3c243fe9700edd8b6c02e9fa1d40a1e3dd1c75c03f3d5d9fe62ffa539f7591f8bc8d8e55a176c0129180927abfa46fd003e37126f14c5e7ee2302d163c5224d5bd08e6c175ad2da569e9f4108d5938d46a2797e288ff18633ccef5c9ca9d0ce39e0550ca7dd7453ce4053271e1b03d57d32a4ef3d82090100a72f2fb3378816ebb46048c7ae410a9ba361673111bc910525665138d3a7ba1902c034c1e51f722d44378b2f496bebd535f772f514cda0a28fa7fc4e36c6b70654d397f6e2b8d4cb595c82ba3b0da9569e157506fad444429b0718e576d77ba7b5fd46a46991c51584c7dbae0568b1f7e3b245759a5c768154daf971919f5b8c5d8bb34c8fe4d95a8e599f58f83752859cb570ffa4a804ed3d918d7b329ae6139b75c1add62347e16b9f0d582dbd62113f031b6dd33dbe0d0dda64ec9f4e71d0aedba518897109a7080879cccecd924cfc33acc9091371e14e0611177786aede3cd2fb9f54c4e0bda04e8952abd101253c162119b78acec31df1cc953e35d47f65a8544927f0e892e49a071805834ef7728f3ededb87f31c4c7125403046fad9056cf036138de9dd908ebd7a97277700f8316c867a8e645978a561d09cef20668157bad79e917f3c80cb82a47db239aaa0a3135a89b970788595a45bfbef8c67f3cefc65ce8f74132224b8cb793b12dee0ec3ac4cf4cdcc9fbea153cbad6fa2ee5087036b27f38beccd15dc2ccaae70c3f14e056c6e70dbda06af5412faec3284b40427e4bbf417e9890bf83f0d44af086b9cedeb4de2ea2d2a9c71e9f3c222eb5594a78b86431ca69716fbc876b0671a3b7cc3da7ca653dec3530da7e85906db5f91cc44982c733244c9e11054f3d6e0cdb73d0a97201b184fc527d2885d06324e2501972d715969b034be302405eed898d544f9024f127caf60a1cdeec7171fa43f3040028e3c4abb8897f120b9c98784775c5c9a1d38b570fb64c6b1d5b44ef55cd155649c744af844c3f45efbe61baa876d6da740fb2e0700805ae7fb3e0d9cf574be29fa424d8cd5d539c058b30c85aff0d226094997a745c8b723355149e14ae20e44179200186195fa8a5ab302557fd85035321c866c91f948883b03cdfd60bc20e9bb267192325304fd805623dc1473d539001dd85b076355b6c7bffeecc5e386f7af4b36aad58cd87503306e1fbcee5d42ee585a463e2015ce2f864fd57045b218024f3978c8e2911d00b2d2325f9c16c4e7004c5b2c8d0acec62d9e4ce894af4f0546d5192557f3a8b960f66404f235631e4237100efeb3274110dc82fa5ddc099ccf92f43c3d8e970396ea4a60cfd17710a31cbbdcf0006c1e9d96a74e7ca8aaa5e74dae162611e6d42985a116f85a0240ce5367b1a8b741a6f230a0ff29dc6c307f34de8890e88fc76257018ad32d3d6bcf196fd0e8d9997df919db890139a0b3e252737eff4b3ea334d460a9b28af489af1c56257b54ec80b2d87e02f9c17838fa293e86e9d47c12d51e0f330947c7f1337fdbd7e2120db3ff8303a2615cdc7a424023e7cef716d4a5bec28902d844b43ef9d7fe912a3817f180f523180640dedb1560225afab44ef3778ddadcb422f3dc55e8ccdbdd8d5f9576e66a44580adcd09958435b9a4f6dce892b3ac3e292292261719b1f4bc5dba4c68b1b8088887fb4e94e1bd775738e5b4c4956c4ca825d7b82e601d415e7adeee67c16a5680dfa52f7e69ced54f442ff6b5de44903d8c5ce3702d5e8ae6eed0667aab2ae15cb6bba8e9825f1ccbd307f9b0", 0x1000, 0xee6}, {&(0x7f0000003a00)="67fbf96e70", 0x5, 0x9}, {&(0x7f0000003a40)="68a91f7d2199352f57d8127e5ab56e979534dd845b110e2e23a31420f172778d497612a19da50d2ac6d5feb60a11263670139ced1c1cfaa20721373e133320a3ec055b101b26ab0c08533047487662611e995fc9ef23c682e86f9a49756efd6b4476b6de92b74fb1a5700cd835d485d6537b7696ae325c80ce0e83a0bc66f59756e884bc1c96de383718b5a4f7d5828b53ba0bba912520f6cbb5f1", 0x9b, 0xc99}, {&(0x7f0000003b00)="45ef639c4736968d376d0d9fb177e2195a509ce20cc9f08dcdcd196e45bc892f126aa801146182d6a5f1e46ae1463a7ac1b21d14c53e2938", 0x38, 0x100000000}, {&(0x7f0000003b40)="7dfe37a7cacf811241d92da9d96d9191dce1d028563c", 0x16, 0x5}, {&(0x7f0000003b80)="30efd8346713177562352066e86625792084e2820e9accc0dc080513e27277963fa3c854a78935129ac1167e5cc3c5909d16b7153034d5c79b7dce181983589dab751992201220ce6a11eaf0113aea13e8a9b2053ca9c0e444e254b488885688537dd95714c9f30bc2f8bd09ef31a7cd6c2d5bc37c3985a0a9efb863286a3be913dd7060ae61c13f181c3b7a2d941467a5ddf8d6d768713fcb71bf79a78d9136fa2cff6f7be2f4461e6f67fc", 0xac, 0x3ff}, {&(0x7f0000003c40)="72ee78b7fa9a241f", 0x8, 0x4}, {&(0x7f0000003c80)="8715c0ba9433bd0a9278fa127a61050bc11667b8a6028472fa79ef17ffdf719e9bb0c7717d525b13b710c727ba69f5d0c966e85fd257090e8f6e0e6650c5c97691a56594a3e444f347", 0x49}, {&(0x7f0000003d00)="22cfd481cbe214c59567cff44f6fc91279c3791150199461f7539fd521259198bb213460f3f677d227464524ad69eabe0ee192334a5e35b9e902db5d05a66f880388773d7dc6c88558bb59683482dfe25d15bc3e3ef951eb4abc66dae4658c077ab7dd13fc346f4b536543496a123a858951373cabba15eed33c0729062fd81267cf98ff524c3ddf6732ef2482cc8804de2a99b98741d4209740ec5b251df28158eb7c3dbb8d6dd24184295c5039d96b69797fc6ae8b", 0xb6, 0x101}], 0x10000, &(0x7f0000003ec0)='[\x00')

22:18:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x60000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:04 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0xfffffffffffffffd, 0x10000, 0x8, 0x2, 0x1, 0x5})
close(r0)
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r3, 0x2008000)
sendfile(r0, r3, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000000)=0xa66, 0x4)

[  699.329454] ceph: device name is missing path (no : separator in /dev/loop1)
22:18:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x65580000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:04 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x180, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x6c, 0x100, 0x7, 0x2, 0x5, [{0x2, 0x0, 0x8}, {0x101, 0x401, 0x7c, 0x0, 0x0, 0x2c0e}, {0x23a7, 0x5022, 0x800, 0x0, 0x0, 0x2000}, {0x5, 0x0, 0x80000001, 0x0, 0x0, 0x2}, {0x7f, 0x1ff, 0x80000001, 0x0, 0x0, 0x200}]})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
rt_sigtimedwait(&(0x7f0000000300)={0x400}, 0x0, &(0x7f0000000140)={0x77359400}, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:04 executing program 1:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040))
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:04 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2)
setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000180), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={<r1=>0x0, 0xffffffff}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0xfffffffffffffe01}, 0x8)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000100)=0x5a, 0xa4)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)
preadv(r3, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:04 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0x6)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$TIOCSBRK(r0, 0x5427)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:04 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x403, 0xfffffffffffffffc)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@null='               \x00', 0x5, 'batadv0\x00'})
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
fcntl$lock(r0, 0x26, &(0x7f0000000240)={0x0, 0x0, 0x4, 0xc4, r1})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)
preadv(r2, &(0x7f0000002540)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/112, 0x70}, {&(0x7f00000035c0)=""/119, 0xffffffffffffff75}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000002440)=""/98, 0xfffffffffffffd53}, {&(0x7f00000024c0)=""/111, 0x6f}, {&(0x7f0000001340)=""/32, 0x20}], 0x7, 0x0)
write$cgroup_int(r0, &(0x7f0000000280)=0x8, 0x12)

22:18:04 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000000c0))
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)
r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x28000)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000040))

22:18:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:04 executing program 1:
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="dcf65ca9edc940d8ff74074b4bf63f3579975d04e9529689abfd56a4ef1928b566efa9dbb484ed15f5b99940d8d5b27db27655e975e3a29427e616a6b419967d6ff52c9d57eb7fd6a7947a495d96c022f5327ea48e48033919c461cb5b895578872ee47a50180d7edef39d7c19580388df7b44d65c9f1766680bbb281feed759dde4cf71208dade9dfaebe98edb07ff5a5e5629fd794d4b564086cf6", 0x9c)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000240), 0x1000)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="08ffb95e19feb925889e79d32e72")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:05 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f00000010c0)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070")
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x580, 0x30)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000400)={@loopback}, 0x14)
setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000001100)=0x400, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000140)=0x8, 0x4)
recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002)
sendmmsg(r3, &(0x7f00000000c0), 0x182, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f00000000c0)="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"}, 0x10)

22:18:05 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101001, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x7ff, @mcast1, 0x75a91ddf}, @in6={0xa, 0x4e20, 0x6e, @rand_addr="f07a2192bba8994c18ca4e6efd6fbf43", 0x7}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @multicast1}], 0x58)
preadv(r0, &(0x7f0000000280), 0xce, 0x0)
r2 = fcntl$getown(r0, 0x9)
r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/fib_triestap\x00')
preadv(r3, &(0x7f0000000480), 0x0, 0x0)
getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8)

[  700.408334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
22:18:05 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
tee(r0, r0, 0x80000000, 0x1)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))

22:18:05 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x279, 0x1, 0x0, 0x800, 0x2cd], 0x5, 0x100000001, 0x0, 0xdb4, 0x9, 0x40, {0x0, 0x6, 0x0, 0x3, 0xffff, 0xa3, 0x0, 0x6, 0x7, 0x4, 0x7, 0xff, 0xfffffffffffffffc, 0x8001, "dadc068bb91ad8e4e3268937c76be0fea43ff21cec5fc7f08670551b3dd621ba"}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43, 0x9, 0x2, {0x8, 0x0, 0x9, 0x5, 0x5, 0x8, 0x3ff, 0xffff, 0x1f}}, 0x43)

22:18:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:05 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x2a8, 0x8001, 0x6, 0x9, 0x3, [{0x8, 0x8, 0x100000001, 0x0, 0x0, 0x1002}, {0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x100}, {0x8, 0x4, 0xe209, 0x0, 0x0, 0x2801}]})
exit(0x8)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x7, [0x400, 0x0, 0x8, 0x7, 0x6, 0x0, 0x2]}, &(0x7f0000000240)=0x12)

22:18:05 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0))
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100))
fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
fstat(r0, &(0x7f0000000200))
r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/fib_triestat\x00')
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  700.848468] validate_nla: 10 callbacks suppressed
[  700.848478] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:05 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:05 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x88a8ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  701.106158] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:06 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  701.300374] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xb2080000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:06 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, r2, 0x1})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  701.447766] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:06 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x87, @empty, 0x4e24, 0x0, 'fo\x00', 0x3, 0x1, 0x79}, 0x2c)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  701.574743] QAT: Invalid ioctl
22:18:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa41, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
socket$inet(0x2, 0x807, 0x4)

22:18:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  701.595194] QAT: Invalid ioctl
22:18:06 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  701.666962] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[  701.683929] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  701.704411] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
22:18:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfeff0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:06 executing program 1:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x5, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:06 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=<r1=>0x0)
write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4000, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x12)
ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000))
write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x2, {0x7, 0x1c, 0xffff, 0x99c2b54fe3a2e919, 0x0, 0x7, 0x7, 0x6}}, 0x50)
ioctl$KDADDIO(r2, 0x400455c8, 0x2)
r3 = msgget$private(0x0, 0x2)
msgctl$MSG_STAT(r3, 0xb, &(0x7f00000001c0)=""/185)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280))
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000180))

22:18:06 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xff0f0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  702.198353] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:07 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xffffffffffff8000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x80000000000000)

22:18:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4000000000, 0x8440)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:07 executing program 1:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x80000001, 0xa2, 0x2, 0x8]})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x800, 0x10000)
connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffa888}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:07 executing program 4:
r0 = getpgid(0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r1, r1)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200000, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r2, 0x10, &(0x7f0000000500)={&(0x7f0000000400)=""/235, 0xeb, <r3=>0xffffffffffffffff}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r3, 0x4)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0)=0xfff, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1cf)
preadv(r4, &(0x7f0000000480), 0x2000000000000113, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcs\x00', 0x0, 0x0)
fsetxattr$security_capability(r4, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x100000001, 0x1}]}, 0xc, 0x0)

[  702.450635] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  702.474548] print_req_error: 356 callbacks suppressed
[  702.474561] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.487154] buffer_io_error: 356 callbacks suppressed
22:18:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  702.487164] Buffer I/O error on dev loop0, logical block 0, async page read
[  702.499653] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:18:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  702.499670] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x17)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  702.504030] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.504047] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffff9e}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  702.504432] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.504448] Buffer I/O error on dev loop0, logical block 0, async page read
[  702.504622] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.504647] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)="02a1d41556dbf1aec4910dc871a3b267ab6f716e5390bb06b1d30e760c0e326691464ddcd7dfbaa20385a343ccdcbaa733b796aecc378107e691bfe4617a86693ab2dc0ffd799609000000ee6df5cb92bde73790f3a6743bd5baa67ef9203f871c6ad4e17f91f4147b281488ac0f043d75bfed6ec28d5d579af779c4d7d0581ed75622885159f06dae26d6918ce9db592ab639e70e7d18515cc3f14137ae53c351365aec8f84c84343d695a2a1f28facc0ce3c85754dfa17cece98997eee3aaf632285b4748f")
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r2=>0x0, 0x742}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0x85, "2eb4679d8c87da3549b69f44a2d4a8eaf36dbaa111e4946d006ea574184bef542307d8ce88fef73cb6e631531b69f05cb93ca5823e9267e8902f4eedc77fe3b4f97672ab56c390046ccc4c9d06f13b405def7aee51a28d86a8f0fae46af4f1ffcfd8edabaa3f9871252e3ce9c1724958bbb136f44be81bf6590e565e4084e2189b8be9372a"}, &(0x7f0000000140)=0x8d)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000280)=0x110)

[  702.504831] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.504844] Buffer I/O error on dev loop0, logical block 0, async page read
[  702.505012] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.505026] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  702.505214] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.505229] Buffer I/O error on dev loop0, logical block 0, async page read
[  702.505927] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.505943] Buffer I/O error on dev loop0, logical block 0, async page read
[  702.506139] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  702.506154] Buffer I/O error on dev loop0, logical block 0, async page read
[  702.625281] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  702.760587] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  702.944151] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:08 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x200)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10)
r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r3)
keyctl$unlink(0x9, r3, r3)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000200))
stat(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8)
lstat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='9p\x00', 0x80000, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,version=9p2000.u,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',rq=0x0000000000000007,rq=0x0000000000000048,rq=0x0000000000000005,sq=0x0000000080000000,timeout=0x0000000000000001,timeout=0xfffffffffffffffa,aname=@em1vmnet1,uid=', @ANYRESDEC=r6, @ANYBLOB="2c686173682c6d61726b3d4d41591f455845432c6d6561737572652c666f776e65723e", @ANYRESDEC=r7, @ANYBLOB=',\x00'])
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0xfff, 0x9, 0x5})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x50, &(0x7f00000000c0)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r8, 0x4)
openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x10400, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000180)=0x7)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xc6e, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]})

22:18:08 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5b, r1})
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:08 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)

22:18:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:08 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$VT_DISALLOCATE(r0, 0x5608)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1b79, 0x200000)

22:18:08 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fi\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6Ax\xf1\xc3\x89\xc1\xd3Z}')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='net/fi\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf6Ax\xf1\xc3\x89\xc1\xd3Z}', 0x1b, 0x3)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xe)
r2 = geteuid()
ioctl$TUNSETOWNER(r0, 0x400454cc, r2)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/71, 0x47}], 0x1, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x4f00, 0x128)

22:18:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x40030000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:08 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xad6a, 0x400, 0x3, 0x1, 0x7ff})
ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000240)={0x7, 0x9c3})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
dup(r0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x1b)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
move_pages(r1, 0x0, &(0x7f0000000200), &(0x7f0000000140)=[0x0, 0x4, 0xd6, 0xffffffff00000001, 0x800, 0xf8d, 0x5ed7faea, 0x5], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x400000, 0x0)
timerfd_settime(r2, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300))

22:18:08 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
finit_module(r0, &(0x7f00000000c0)='net/fib_triestat\x00', 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
sendmsg$rds(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)=""/219, 0xdb}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000001280)=""/110, 0x6e}, {&(0x7f0000001300)=""/100, 0x64}, {&(0x7f00000023c0)=""/207, 0xcf}], 0x6, &(0x7f0000002640)=[@rdma_dest={0x18, 0x114, 0x2, {0xaa, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002540)=""/203, 0xcb}, &(0x7f0000000100), 0x8}}], 0x48, 0x40}, 0x4044000)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:08 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x3, 0x4, 0x1, 0x4})
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x101081)
ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000080)={0x5, 0x7, 0x5})
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000))

22:18:08 executing program 0:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x100, 0x56)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="75a74e50057e853e807fbe0cc9f50499069a7341bbd754d844aef7692b76f4f7b08db0fc2cb3475eea5f41e1c8897896ec233d699ad1dc70707720ad5fca1deac7c69334fed4f6be597145bc9ea7a9688b2f134f32b940c097a08634e9e723efabee00fbe99f5c388ab51f9c240a23a4c4a9818aa89177e8ca656a8db05a6e9d5813665b7b65ce8045f89e1d49dec062ff390af2c4df3fe0fb0f1cb092cc38565b5e16e7412c4462447d92818e42a1665c023d5d3f7bb687c4275f8835928f1af2a64271cbdc5a79e48e2139404d4ebb74a229fcfcf773eb4f6bf41e49283302737b464f")
fallocate(r0, 0x60, 0x2, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
lseek(r3, 0x0, 0x3)
sendfile(r1, r2, 0x0, 0x80000000000d)
ioctl$RTC_UIE_OFF(r0, 0x7004)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
memfd_create(&(0x7f0000000000)='eth0:\\(vboxnet0system\x00', 0x5)

22:18:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:08 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @remote, @remote}, &(0x7f0000000540)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x2, 0x4, 0x2d9, 0x3f, 0x6})
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setgroups(0x6, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7])

22:18:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:08 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
prctl$PR_SET_ENDIAN(0x14, 0x2)

22:18:08 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000100)=0x20f7)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x5000)
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0xd000)
r2 = add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="7925539c57ed7df38e4f2f8bb67b4932bf1bb6a46a86c3d75fbbdc4d8b94d7b50138e9a92399e180569fd5ec5eb0460e80ee0483283f5c72dec0087c357724e1d472742a157b9dec8b55a567ca6f21a5c427d11420ea4a0c15b36fbd44429ef5f7460ec74843e370f017018f9d97507a7590cfb1138f120e3874c111054aba57a3f39487b5388f5f8c9b426ad7bc31c7b114528ff6ec08e4c522d3fe8c6f5261fb9dd67715b581136a0754c95610f84854fb5be84a6ecd5fd193c64cd4f23dcaa82e9d84d19bbf1ae654175f", 0xcc, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r2, 0x0, 0x2}, &(0x7f0000000400)={'enc=', 'raw', ' hash=', {'mcryptd(michael_mic)\x00'}}, &(0x7f0000000480)="7efb4697075bd970dea9e9f502d3ac2813fa490e2828572a044ac647df9c7601f29bba0f57a4dc69ae27ac316ce114ffac811b88579a62627e7085c23eafee6b306758e4fd0b9801241acf136bed5b4a6d9f8deff6b5ae2d29a20bb51dd4b0b530323e02f43076014f5befffaa7a300b6e53591f709b85e740a7da9b50d6e5540d92dc6cb148c96d476730da186c1134fd8a3dd088afa1173ecb57a3e763d26a3c23f2df675da6d2b530f80e9cbb844649b53b3f72c9ec71b4a69602bbc0825ea854a424a7fc384faa79d02faad651ade04091253a7d8c265ce1c42d42c7b83dafe2119a3bbde441", &(0x7f0000000580)=""/219)
getsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:09 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x2, 0xffff, 0x1ff})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')

22:18:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x103000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:09 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000040)=0xc)
ioprio_get$pid(0x2, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:09 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x200000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  704.605810] audit: type=1804 audit(1550528289.494:37): pid=1039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir409690339/syzkaller.gC1Ml4/989/bus" dev="sda1" ino=17434 res=1
[  704.732307] audit: type=1804 audit(1550528289.524:38): pid=1101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir409690339/syzkaller.gC1Ml4/989/bus" dev="sda1" ino=17434 res=1
22:18:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x2, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0xa200)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0xc)
fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x1, r3})

22:18:10 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/148, 0x1}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:10 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800)
fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x91, 0x2000000}]}, 0xc, 0x2)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x300000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:10 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x80001)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/82)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x7, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"])
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3f)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r2=>0x0)
ioprio_get$pid(0x3, r2)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180))

22:18:10 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r2, r2, 0x0, 0x7748213a)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:10 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x8)
prctl$PR_SET_FPEMU(0xa, 0x2)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:10 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1f, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:10 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0x4, 0x2, 0x9, 0x8, 0x100000000, 0xa8, 0x8, 0x8, 0x8000, 0x2, 0x9})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x381000, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x9d7d, 0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x500000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  705.875338] validate_nla: 9 callbacks suppressed
[  705.875348] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x214, 0x0)
setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000100), 0x4)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x511800, 0x0)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')

22:18:11 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fremovexattr(r0, &(0x7f00000000c0)=@random={'osx.', 'GPL(keyring\x00'})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:11 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ftruncate(r1, 0x0)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:11 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x8, {0x1}}, 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
prctl$PR_SET_PDEATHSIG(0x1, 0x2b)
r2 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x8)
ioctl$KDADDIO(r1, 0x400455c8, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180))

22:18:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x600000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:11 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fbbf3dad410885a3c81e01096cf2fc63ef7942f7f24132aadff76848b338baad45ea1f060e"], 0x1e, 0x2)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x4000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x7, 0x3, 0x80, 'queue1\x00', 0xd30})
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0xd45}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
recvfrom$llc(r1, &(0x7f0000000100)=""/103, 0x67, 0x1, 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000000000d)
socket(0x0, 0x3, 0x4)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  706.248994] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:11 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000001180)=""/1, 0x1}, {&(0x7f00000011c0)=""/228, 0xe4}, {&(0x7f00000012c0)=""/247, 0xf7}, {&(0x7f00000013c0)=""/106, 0x6a}], 0x6, 0x4000)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000014c0)={@mcast2, <r2=>0x0}, &(0x7f0000001500)=0x14)
sendmsg$can_raw(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x1d, r2}, 0x10, &(0x7f00000015c0)={&(0x7f0000001580)=@can={{0x3, 0x200, 0x6, 0x3}, 0x4, 0x1, 0x0, 0x0, "7e532ab799094a33"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000801)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x20000, 0x0)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
clock_gettime(0x0, &(0x7f00000016c0)={<r3=>0x0, <r4=>0x0})
ppoll(&(0x7f0000000000)=[{r1, 0x484}], 0x185, &(0x7f0000001680)={r3, r4+30000000}, &(0x7f0000000080)={0x7fc}, 0x4)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000001640))
creat(&(0x7f00000000c0)='./file0\x00', 0x40)

22:18:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x700000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
r1 = msgget$private(0x0, 0x607)
msgctl$IPC_RMID(r1, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:11 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:11 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/40, 0x28}], 0x1000000000000268, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x3, 0x3a, 0x3, 0x3})
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r3 = fcntl$getown(r1, 0x9)
fcntl$setown(r2, 0x8, r3)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={<r4=>0x0, 0x37969cfb, 0x30, 0x2, 0x100}, &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={r4, 0x6}, &(0x7f0000000340)=0x8)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x100000000, @empty, 0x700000000}, {0xa, 0x4e22, 0x7fffffff, @ipv4={[], [], @remote}, 0xb2a5}, 0x4, [0x10000, 0x0, 0x0, 0xffffffffffffff00, 0x9, 0x3, 0xfffffffffffffff7, 0x5]}, 0x5c)

[  706.602122] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  706.639917] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:11 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="10c0fb7a45e643d80d4d41f667467e9fa4e93944b15ed071b635a5a4405f70d470c9efa3e2fff8781310d4561f0cfd")
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4)

22:18:11 executing program 4:
perf_event_open(&(0x7f00000000c0)={0x1, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
keyctl$session_to_parent(0x12)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0xdf}, 0x8)

[  706.888540] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:11 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
fsetxattr(r1, &(0x7f0000000000)=@random={'osx.', ',wlan1^\xee\x00'}, &(0x7f0000000040)='/dev/radio#\x00', 0xc, 0x1)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xa00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  707.194075] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:12 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:12 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x16, 0xfffffffffffffeff, 0x7, 0x65, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_key={0x10, 0x8, 0x3a8, 0x0, "2f41c26797c45e8eea4ac43ce139a0e5ff78a9c245df5a8d0dceb5777aa6b1525b4184aa0a3ed8da027706668a92130d4ce8fbc8cee40db25699dd1663ac4d3c5a770289d471c8c90711c98bef82c6d962e96065eafbe36380cb3b15afe5ba2f312f2b61d8fbb646ef33c4cd812777f1dbc1e41c68"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0xd5e9, @rand_addr="34abbec0e349d180cc6a55e53864159f", 0x100000000}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x2a}, 0xffff}}, @sadb_x_sec_ctx={0x19, 0x18, 0x80000000, 0x9, 0xba, "17844b863f4c12fbbc9901abc82f671b3fa63a1421aa44e226c66df485677620150f645f32d15bb5fc3725e598134bc55738c8eee0d6d49b2271a10eafa5843759c652d03d58610bc093f410bf8e79b261211b90de2e7b2e5036c347a02b1dbc086e2246ab77698273b54b99889103929c81509a36ad27f05fdf940f5400881a3f681983862faebe30e98c6bd735b7ab7fc4c0641c458fa01394040293c7694e1cab97c409b8e77a88fe81e7b796ebb43665cbc398694c187fde"}, @sadb_x_nat_t_type={0x1, 0x14, 0xa8}, @sadb_key={0x1f, 0x0, 0x748, 0x0, "a465c72d0401ca14955353064164e65fddd5e6874f5a1b9c33c121d1cebf5c9f1c872ee4565e59bae7554c8ff1503c3672018a6e2b550b4ddca97d0e06870e46f9ae9de0c14c1a6b322b9520dd5f5810466007d83d1ed2a00fa8a8a32f78cb00272c7764d6e44d599afba61444e6a499093a8dd61101d420c7c32d83829afbc29aa892bdae0c770c1a7741dc548dff7d2b8eb5ae69886fd3a1309b5a48ae8c939a92d3462ba249961cfc1d2cd1608f6a67c7688451f256e2f0cc8e578e6428e42716fbd553116caefcfa67ffc6fc5ef081978051ca65200270bba5fa0402450749d5d9e35c20d43803"}, @sadb_x_sec_ctx={0xe, 0x18, 0x20, 0xaa, 0x62, "ba9def5dd6a5b5341347ad9049d4d746c493eabe0408ba66eb2d3938f5cd08dbdd2142d6cd1ac7cfbf42c0e26ab3dbe7d84871078bfef08ccb7d602a9b9d4d8d7fb5d67407e22cfe1b8e694cf0768c7dbe9105d5e40e7b4d96f6ba1604ae334f17f1"}, @sadb_lifetime={0x4, 0x2, 0xfffffffffffffc01, 0x1, 0x8, 0x1}]}, 0x328}}, 0xc800)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x4})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r2=>0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f0000000000)='/dev/radio#\x00'}, 0x30)
mq_notify(r0, &(0x7f0000000580)={0x0, 0xa, 0x2, @tid=r2})
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xc00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  707.466730] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  708.367771] print_req_error: 417 callbacks suppressed
[  708.367782] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.379454] buffer_io_error: 417 callbacks suppressed
[  708.379464] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.392892] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.399394] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.406844] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.413319] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.420803] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.427249] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.434612] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.441100] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.448918] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.455323] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.462761] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.469223] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.476622] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.483234] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.490615] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.497088] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.504449] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  708.510906] Buffer I/O error on dev loop0, logical block 0, async page read
[  708.785666] Bluetooth: hci0: command 0xfc11 tx timeout
[  708.785769] Bluetooth: hci0: Entering manufacturer mode failed (-110)
22:18:14 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x313ab6adaaa05a99}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x114, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x64}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2000000}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffdae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40e}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40001}, 0x4050)

22:18:14 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x20, 0x4)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xe00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:14 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x7fffffff)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:14 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)={<r1=>0x0, 0xcd, "be3106a3b71c8c18a80a07b86701febd88ee8599447e1a67d564b1df380d52bee38d936a393f462c956fca433f6cc49f1e6b8758b13b67988fe940f9301c496ae6215e2e31a71a37c4a31fc04d994e932b799809d8c80e0c8c7c94190b6bb4a1817caa80a45fd34eaa6ea51c040dba960cb718a1fbad8328156494d184989a75b98eada5e12f3e52df8e789a280c8dc3e5e2b4761b79f2e1a5356ccad715d732f66eebd83fc79403debf05d024ff908af4456675dfeb3643023c29212eb6e926998555c1383193765bfa9e63d4"}, &(0x7f0000000400)=0xd5)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/current\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000440)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000500)=0x98)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000400), 0x2c7, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={<r3=>0x0, 0xb5, "90eb392aa0e0d3c62a687818983890d797c78a9eba464e278f98024a48a040c46a113f71e5d7deb7df0f21ca71577eff093da01ef7af222eae4179c0bb2f735a825f16d031a90aa6e47bef1eab9383aa3d551a6ccfb4c3d7acf6a39c28eb7e6aaecd2102ae206603d905daa997774fa79689bdb08fad1e36b5de6ad7c61207843b8d1ffd4290b2acb7a1ce32c9b29c56d40d360e8106664b218907a4a8678c84a1b9db88d1b03ee9a273453719200e8e28edf0b3b6"}, &(0x7f00000000c0)=0xbd)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="a9000000b2077851fe38836b320715e630d4792d9a2c1ed030ae9e8476a4df0be1e59dc28d8f21618499ed09163a8280aa1b603898bd5548f60740295429d79fc3b92194ca280525a297cc8c4c3335f3d3e51e6994078a2a43fd6470a78f00fdbe5bc5cd51676761fd5e72a09688af1ccb794e0847063729008de1d1770d8b6c776e3a05352cc1656ceffe8c1edac06523afdb5ad93ddf320af99618715b0cd69e4724aba4"], &(0x7f0000000100)=0xb1)

22:18:14 executing program 0:
r0 = socket$inet6(0xa, 0x0, 0x2)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
setns(r1, 0x4000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  709.505568] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  709.587685] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:14 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getown(r0, 0x9)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000))
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0xa7, "56293d6e466cd6849af60ad4d29d18aa66175d96dadb84889629e93f467654ad9cd51665c874684886f80bf96a16ef694027299ca4618184062fec571f98ceedbbed2869ffa1c7e529b21b740bd024f2bd510d46a698d371b22b49051a03b35a8b5442de919ddbf7915006ab7ee805a9bf80f5091c55efbeb095eece355816f2a347992ef23493e8877a810268ad28d5781b7e9601f7688122360a42d3ce1f2d21bd6941cb8e90"})

22:18:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:14 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0xfffffffffffffef8}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  709.756706] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:14 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={<r2=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x4, 0x10001}, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:14 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x1000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:14 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ftruncate(r1, 0x20)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  709.985560] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x2000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:15 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x101080)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7, 0x4, 0x7ff, 0x10001, 0x400f, 0xffff})
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000002c0)={0x6, 0x3, @raw_data=[0x5, 0x200, 0x9, 0x4, 0x1, 0x9e, 0x400, 0x1, 0x6, 0x40, 0x8, 0x9, 0x4, 0xffffffffffff2a97, 0x0, 0x2]})
ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000340)={0x3, 0x8001, 0x815, 0xffffffff00000001, 0x5, 0x28, 0x3, "fd81eb1216dddd6d4ca34881cfc963768eaee944", "61606503af3ea8a1747e0d058bb8ac83d7d39c77"})
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x0, 0x1, [0x4, 0x8, 0x7, 0x1, 0x552, 0x5844, 0x7, 0xffff]})
r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
getgroups(0x7, &(0x7f0000000440)=[0x0, <r4=>0x0, 0x0, 0xee01, 0xee00, 0xee00, 0xee01])
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setregid(r4, r5)
ioctl(r2, 0x1000008912, &(0x7f0000000540)="686dd4ae6b01eae1b8b57a351451d848cfedd3fc4865bb3d54c1cebce090278a7e38864fbaf8845dc2f63addbb3505756b27be290fa9a78f10d27591cac10b92f6b8b71a515bb42c668a6162b55b7ac279265ee8cf8ece175809b24daaa89cb74b8ce8e650be94feb4607cfea1da885be6fd05c605a94a3e70435d23027f25d280f2e5144d1dd337464f12533bf7f8ca634287174ec2b2d2092ff7d3c6b7221684f8df3b211d106b2248eff833964192d461613ff646e40fe2d37d3f977da2558ff6f99cb84bb6")
preadv(r3, &(0x7f0000000480), 0x19d, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x4)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e21, @multicast2}, 0xc, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)='team_slave_0\x00', 0x4, 0x91, 0x9})

22:18:15 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x10001, 0x7, 0x7, 0x0, 0x0, [{r0, 0x0, 0x3}, {r0, 0x0, 0x1ff}, {r0, 0x0, 0x4}, {r0, 0x0, 0x100000001}, {r0, 0x0, 0x8225}, {r0, 0x0, 0x200}, {r0, 0x0, 0x1}]})
r1 = getpgid(0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101080, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/77)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3f00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:15 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000000})
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:15 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$setsig(r0, 0xa, 0x38)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:15 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x20000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x40000000000)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0xfcd9b85730be020, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

22:18:16 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2006}, 0xc)
ftruncate(r2, 0x2008000)
dup2(r2, r1)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:16 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0)
recvfrom$rose(r1, &(0x7f00000001c0)=""/138, 0xfffffffffffffe82, 0x2001, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002)
write(r2, &(0x7f0000000040)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000180)=0x1)
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000e94000)=""/62, 0x3d87}], 0x373)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x244)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x16)

22:18:16 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/130, 0x82}, {&(0x7f0000001240)=""/144, 0x90}, {&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000001300)=""/59, 0x3b}, {&(0x7f0000001340)=""/21, 0x15}, {&(0x7f00000013c0)=""/253, 0x2c}, {&(0x7f0000001840)=""/219, 0xdb}, {&(0x7f00000015c0)=""/85, 0x55}, {&(0x7f0000001640)=""/32, 0x20}], 0xa, 0x0)

22:18:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000040)="0c8091534a117439a5699226ea4ba378e52ca3db6a1621798dd23ec177fc629b48a0549bd9c659680239d11f335b39f727f009e0d208d21779fcf5b08cc30f736ea8a3de5f16468a767543ff06aac13ef3554e41d7e5cbc4f6b890cfdf09be", {0x9, 0x1, 0x34324948, 0x3, 0x2, 0xffffffff, 0xf, 0x7fff}})
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x73a6b0e3178472ab, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=<r2=>0x0)
tkill(r2, 0x28)

22:18:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = getpgid(0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/psched\x00')
r2 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, r2)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)
rt_sigsuspend(&(0x7f00000000c0)={0x3}, 0x8)

[  711.619851] validate_nla: 3 callbacks suppressed
[  711.619862] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4a00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x0, 0x3)

22:18:16 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000340)="0adc123f3188a0701e5f1db46515d5142a4a35787f11bca5adfbabc29097ac068ee49040791e93e63067d3ac37f6a0e6675b58254a749475efed90d6fba5bd88062fc23be5836d6f50f98ce4ca26e6f0b3a38cd788ece001000000000000000000")
preadv(r0, &(0x7f0000000480), 0x100000000000015a, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0xfffffffffffffffb, 0x4)

[  711.780032] Bluetooth: Invalid header checksum
[  711.784831] Bluetooth: Invalid header checksum
[  711.812399] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  711.826244] Bluetooth: Invalid header checksum
[  711.831023] Bluetooth: Invalid header checksum
22:18:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x4c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:16 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xa29, 0x8000)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0x7}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r1, @in={{0x2, 0x4e22, @multicast2}}}, 0x84)
r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ftruncate(r0, 0x101)
epoll_create1(0x80000)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r2, &(0x7f0000000480), 0x19d, 0x0)

22:18:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  711.990559] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:17 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
recvmsg(r0, &(0x7f0000001540)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/85, 0x55}, {&(0x7f0000001280)=""/14, 0xe}, {&(0x7f00000012c0)=""/202, 0xca}, {&(0x7f00000013c0)=""/20, 0x14}, {&(0x7f0000001400)=""/117, 0x75}], 0x8, &(0x7f0000001500)=""/5, 0x5}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:17 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x600, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0))

22:18:17 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80002, 0x0)
r1 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x10, 0x80000)
signalfd4(r1, &(0x7f0000000200)={0x4}, 0x8, 0x800)
preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000040)=""/148, 0x94}], 0x1, 0xfffffffffffffffe)
r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000280)=0x6)
getpeername$tipc(r0, &(0x7f0000000000)=@name, &(0x7f00000001c0)=0x10)
preadv(r2, &(0x7f0000000480), 0x19d, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)

22:18:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'nr0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000340)={0x1d, r1}, 0x10)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

22:18:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/\x00p_tables_names\x00\xaan\xfd\x17P\x9am\x8d\xc3J\x01U<G\x86\xca\t\x7f\x1f\xc9\xdd\xddX7\xd3\x9fG')
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:17 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x2, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mISDNtimer\x00', 0x8040, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000300)={0x1ff, 0x200, 0x2e26, 0x1, 0x80, 0xffff})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4)

[  712.647684] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:17 executing program 1:
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000000)={0x8, "6b751db33671bb6fcf703c9e2ca6ef34f88df539567eaa44b4416e5f766dc3b8", 0x0, 0x5d08, 0xcd, 0x9, 0x2})
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6558000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:17 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7b6, 0x2002)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000001c0)={<r2=>0x0, 0x46, "e46a34de1915102399ba776c9948e2264d2b6c583ccd374a27fc67d5aa4814127d255222a211cb15cde542591d1c2d44618a50e3ce5c43c333a5577061e56055f045636b2bef"}, &(0x7f0000000040)=0x4e)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x400, 0x8000}, 0x8)

[  712.892754] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:17 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x200})
preadv(r0, &(0x7f0000000480), 0x126, 0x0)

22:18:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  713.110518] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:18 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008003)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:18 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000040))

22:18:18 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x5, 0x0, 0xffffffff, 0x5, 0x8, 0x100000000})
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x2dd, 0x100, 0x4, 0x6], 0x4, 0x2, 0x0, 0x8, 0x3, 0xff, {0x3, 0x7, 0x7f, 0x6, 0xf374, 0x8001, 0x87, 0x2, 0x1c58, 0x6, 0x5, 0x3, 0x1, 0xfffffffffffffc01, "13d65607a4c3ecda3de6e6155f1d002d3f0fad141398159fc229e218c6ac9cb2"}})

22:18:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x6c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x2000)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000003c0)={0x0, 0x9, 0x40, 0x100000001, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000100), 0x0, 0x0)
r2 = getpgid(0x0)
syz_open_procfs(r2, &(0x7f00000000c0)='fd/4\x00')

22:18:18 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ipv6_route\x00')
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2})
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  713.675218] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  713.724452] print_req_error: 234 callbacks suppressed
[  713.724464] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  713.736233] buffer_io_error: 234 callbacks suppressed
[  713.736242] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:18 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r1=>0xffffffffffffffff, r0, 0x0, 0x11, &(0x7f00000000c0)='net/fib_triestat\x00', 0xffffffffffffffff}, 0x30)
r2 = syz_open_procfs(r1, &(0x7f0000000240)='\xf9\xe4\xff\xff\xff\xff\xff\xffreate\x00X\x9f,sVF\xb1<\xc7\xdd\xfe\x90U\x80\xa0\x13Zv\xbcV\xaea-\xb7\x0f\xcb\xd2GQ\xfc\xfc+\x14\xfa<\xd9n@,\xdc\x9d\xaf\xd1\xf3\xb5\x11L\x1d\xd9\xff@\x9c\x9e\x90\xb8\xd8\xab\xd1\x15\b\xb2R\xb5\xfa\xed\xe0\xc4p\xd8~\xedP\xa9xfW\xb9\"\x9c\xb4\xaaP\xc8\xb3n\x12\xb0\x04-C\xb0;\b\x00\xdc\x95U\xb5{mk&B6p\x11\x8f\xd6\xb4\xb7\xb4\x8b\x87\xa7W\xe4\a\xccG\x84\xe1/3\xe8\x1c\xa1!\xfb\xc4\x97\x01\xba-$F\xebm\x95\xb2\x85r\x90&b:\xbbN\xa76\xd5\x90\x99\xe7(\xb8\\\xb5jj\xa8\blt\x16\x03i\xe9\x8c\xee\xdf?_\x021\x99\xe9\xa2H^\x0e\x99\a\xef\x88\x9b/\xa6\x02.\x9e\xf7Hl$\x9bt\xb7\xec\xff\xae\xf9\xa1\x917JQ')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  713.764796] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  713.771352] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:18 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000034c0)={<r2=>0x0, 0xd65, 0x7, 0x80000001}, &(0x7f0000000080)=0xfffffffffffffe36)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x3, 0xd7e0, 0x9, 0x80000000, 0x80}, &(0x7f0000000100)=0x14)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @aes256})
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000033c0)=[{&(0x7f0000000240)=@in6={0xa, 0x2, 0x1, @remote, 0x1ff}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000280)="c583c847e2f0942cfc40abf94b436fdb85c1012b1fe906ec16edb1cb9dfee31307cc0be4692acc5bd76174a69438fc08499750544c31f4a150773e452a0bf168d7e6445cc2c52e987272d955997b6707a2677146972144a3ea1f7f3acc", 0x5d}, {&(0x7f0000000300)="c6bf13563553e0c3dd751a39b48c8f78f236385e731cb4a89dcb662e1d38f9721181bba042f2a2924949fbbd76d753aa304561d6c74e35b9eb81bf9497ea6823527ed4154c235d0b9f129f6304fd89ba52d719b434ab519a6edd18958b60f263cc7eaa28bf271c85547ae5266fa5c81d48d9cdf90c3b7d93242f28b5b0eeb0655f185d379dadc9103f7a7ce583d35ef7fb8ef655c7de5720f46f9d8d043f9ebb9c86781277a0a760", 0xa8}, {&(0x7f00000003c0)="906568c528f82a2a492031ef22ac2f13ee6ca6b1084cea11042043ab08e350147b4075c647fafea8edb9aa0491e4446d2cadf78ec4d5f1b8ab12923cba33924dc74070e2094e958e4f386c19cd", 0x4d}, {&(0x7f0000000440)="03e059bb30b9eecd4b063b7852c881f15eb7df712ad3e5beb052a627cc9eb463473f69eccc7892364948ce4ec77ff4d20bf20a123659f7961abd4320e1a2f75e0f558c7715d4125e27826400a10e0e5165c73fdc5e132c5411b0e32491ba64aa78bd0c335123400e963b375ae8090f0516377fc730692b523d54e4adadc59f26924a65e2e4494aff0f81f9095d70c104a59554b65288be99a648e93ce86321002f88d693e229a219379c4e82b6e8559ff2c981ef02d394903d7ceec15ac6c3", 0xbf}, {&(0x7f0000000500)="4145aa7dbbf2b10a361fc72d1c59786c8a28cfa8ada707ac3058bcd985d06ee73b056b371c7de9ac3f5c1bee0c76f762d362a093400836d04967fa9ecd1d4d56a9cda78d16dd7040cc99150e865a0a464f3441f2bb1aed350c288e3f7a4d8f5c9bf279f7dfc928db1e01fe2d135bf8803c713663c8e6827a3d709e3ebd39fd16e372e91c9d5459e0ecdb92547b4df88abd93197c4659f548c607ebc18d481e86ede7a21e2783896591a70107d49e5e054d8425885c9e82b2efe0f7b3703e22", 0xbf}, {&(0x7f00000005c0)="d8b124cc952ff777f6f6c15c9d699d10122aaa20c65db7b3f5de30559b90fd7709d05dd3e6c9a6f4dcfb0385052c1290e6ba42564ee3ede9f09300eb2b52bce4bb807dbc4f65987316d5ace9c94a875e8e834ab5feed87ca44f755d209661cef88e806e444b576409837556a5342453300f92d7144c80360518a8c9a7b36018ffe270b5280d677aaffebeb5e82b51cd2c6d2b85ffda22fef45452175c6b1f858812c04c03a30e1150bdf54f68d0423e2ec779fcc82d3dfafe5439a3f08ef0e0146271b74f915b7f7a3308c857a6df9edc07fabec8cc5fab9b6f2137e2d5146ee4d084a916030c119d06db3eb00fdf817bb87", 0xf2}, {&(0x7f00000006c0)="2f8c5e45b56a1cdec7f219fcb8bfa5e65101b75fec867b302d61674bcf483f8ad84fd919ee55d0b229e0b3e42588d1a32b5e59c1032f951cda6c5b8b35246e84c9ee37af40a57c43116063b426c9d992863dd6f2ff981723ab1aec4ee7d3ba1134124539b6fb3e342e2c6ca8d8825a36f7f6e43a05fbfb675d1d6e784681ad2d2ef15ea4ba3885f229d5285ca313650d934aba48a72a7e64fd26046292b748ce6e98d171c345901dc4fbc74f82c4696934c1f71c629e9ae151d9c7002ed30b6c6b889def91afc3ddc90a8e1909f58979c230fb9ef2", 0xd5}, {&(0x7f00000007c0)="dc51af9486305244427cb196714dd9dc243ba07bd65c1b2c585e10c83d4c1dc57d8687e1082237c76d5950584aba42489bf0710e9a5106b2f4308b8b5811629c1a39287cc59f412024c19ff51d258392149f4b83e923a11f76b4e22e943b4d5b6fbdfa302a7f7d1a6a33491b4e4c4e1c0ac20f79b2b9add31670ef3e83de0481909586ec10c44b8c82663589633dbb66549df29e73b368ea09ac093cfa1298a8d23e", 0xa2}, {&(0x7f0000000880)="f849b7eeabecc36a5a978c64d5263ed61a6777d323cd5aa73f3db105babce39ff96248fb7d3a4d499255d121e2e285e04f07ad67e2afa71dad0edaa522894b9a37c257f1fe06ee7235a701fe4162af071317", 0x52}], 0x9, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000008400000000000000b4005e0c05000080180000000000000084000000470000000000000500000000"], 0x30, 0x40000}, {&(0x7f0000000a00)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000a40)="a78e4fdf9cb08ebd4441", 0xa}, {&(0x7f0000000a80)="e2c51e9d33a5a7ab62fc04b425973173550ff0366d02e938472e6e97f141a49533ca0a4b9b0253668279bed9c1b465e837c09d1429da6e74a900b125990a16499a38f167771f45bb9dd817f42eb2721c41737785152b214aac54518808ef623b208400e0be3889b92010379156ab83d9a1934b8fcff3f5c714d28059ecd2a7d1285fbec2476a7843c369a092d3f981a278ebff1d663d640c766fd72c41dde34a18d9797520c01aef0bcd3c202473764fe580cf0022", 0xb5}], 0x3, 0x0, 0x0, 0x800}, {&(0x7f0000000b80)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)="479505307194a2ae704aa54010a18a4f01b69be9bae8cbd08ef445e7f3211604d85d296e086dde426e62aa8cba6c8df440dff69de3da5e84f1324c5a5ca874634ccee61e4928a0cca4daacfc1dfe6f8b93802addbe504c47553159b627112a18", 0x60}, {&(0x7f0000000c40)="77cc492ed7afa20a84af36e5baefd7d6e96ec0bf1143d9f35c372937ea8a13054338219ee4ef60ace7413b1cc649eface0940bdb83e91fba5d390d8f98786695650a22191e727c63d9c4527e9f60843de1622150fb55b8a8a7f3b5423dbcce09b8884e243565e44c6323889cde586611ed5d4003267ef946de0fea96c806ed724a9716ce0926fa987e58d64d2bbc344e013f75297d898504ee6ce47c480d4e014cf683a172547fe17e6ad1522f79f756cda4c742cbe755aa903275937e20f232cf47912d8032cd7e21ff5e", 0xcb}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000000d40)="89608c6747668ab2138dc02ca5497a175c0d81f015b7f26d200cf1ae893ae7e50a2c7dd7ccf73fc25955a05fb16abcb5577be629de45536497fe1c09e2669482b5d718ef5d276e68e6e39b84ebcc47ab0566917e0a3d266717bc2f1a145fbf1fe02f670d6270b8725f836f57d4d77e4de2c5fea8b7049e2de849fe57cde62af9717658bafa0b04d6293c38caa1e4f646eb7c44092b1734d48f41940cfe17368cf72c88a4a0f505b3db9ddbd32bb66f7cc848a5394a2aa5e2365544d13be19e4c451b81489cbf4308491b06633a628e3fcd6c0b61ed44a3d293fbb9e441f4d849539a958bbf643455fd1622bd", 0xec}, {&(0x7f0000000e40)="f969ba4740fbff2ad970d50710a2d1161512121183c8a23d60e9be9017dfbbae8af6ef2bef55f454858afa29e61b478d74a3f92407e4da224160a9e9c88f80f8da747029fc4b02ebdac046ab3d70b93f4e22825449d80ac5682faf2f9d7c34887a483099c4e6a0a3431e430c3c77f30b248fb6a27241a3bcec6ffb1c", 0x7c}], 0x5, 0x0, 0x0, 0x40000}, {&(0x7f0000000f40)=@in={0x2, 0x4e24, @rand_addr=0x4}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000f80)="b22cf66757dc6972c859cef72b795f683730b7c806c054bd41ae347ce16728958d511b01aff5105ff33c0526d0e4296ea3e5937dfebb70adbc012a126d69a827d92eabe318991ff4a678bde7b4697e396b71ed789764ad72b82478d4", 0x5c}, {&(0x7f0000001000)="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", 0xfb}, {&(0x7f0000001100)="0d2379446f4716b5d02f4f57af6b6350758b2706eaa8e874b3b7df63d8453e2924f9e7273d50568220c2c29d12b172a9c57123fe65f28b1cc0b1d4b268c1a69a1cfa6385748e359c683348bda8086a590cebbd40fa70f41310458831410f", 0x5e}, {&(0x7f0000001180)="5a0ba4101e49a69ecf1e6728af3aee772733d3f59cb085357bc18613cf0edf5a3be9f6182ad74c356021dae53e170006c4edd47ff6ddb1fbc58bfa1467ae6257188a914c757086e229382727a8", 0x4d}, {&(0x7f0000001200)="30cdd222ff616e753f3846fc3730391b03ec28676fc03d9511618161d724b46708505d33", 0x24}], 0x5, &(0x7f00000012c0)=[@authinfo={0x18, 0x84, 0x6, {0x586}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x78, 0x4000}], 0x4, 0x800)

[  713.811448] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  713.817938] Buffer I/O error on dev loop0, logical block 0, async page read
[  713.848482] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:18 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  713.898514] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  713.905024] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40000, 0x0)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000100))
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x7a00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  713.981593] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  713.988123] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:19 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100))
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x7, 0x4, 0x4000800, {}, {0x2, 0x8, 0x9, 0x5, 0x6, 0x8, "18901e05"}, 0x8000, 0x1, @fd=0xffffffffffffff9c, 0x4})
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  714.083399] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  714.089966] Buffer I/O error on dev loop0, logical block 0, async page read
[  714.131335] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  714.181724] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  714.188284] Buffer I/O error on dev loop0, logical block 0, async page read
[  714.231165] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  714.237721] Buffer I/O error on dev loop0, logical block 0, async page read
[  714.299894] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  714.306399] Buffer I/O error on dev loop0, logical block 0, async page read
[  714.366890] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  714.373506] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:19 executing program 3:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x0)
r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000002c0)="0376c681a8deb8c34d1b8b519565644ca7b8b9a4ba4c203b237e7fca03b4e0aa03cb907ae79ed8b7b672041f7c7498fe2fde164617c06608f8d35962f960dcf0c5a8d1b44c98282d48f44e1cad2f97aa73eccc845623f3952517f5dde663ce8fe48cda48180596009abbe56e98299440a85aa844e0eeb542e3b9", 0x7a, 0xfffffffffffffffa)
keyctl$describe(0x6, r2, &(0x7f0000000340)=""/40, 0x28)
getcwd(&(0x7f00000001c0)=""/229, 0xe5)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180))
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video35\x00', 0x2, 0x0)
fallocate(r3, 0x15, 0x63, 0x3)

22:18:19 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, r1}, 0xc)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x8100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x7, 0x800f, 0x4, 0x17, 0x0, 0x914, 0x9, <r1=>0x0}, &(0x7f00000000c0)=0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x100000001, 0xb, 0xfec6, 0xb2, r1}, 0x10)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  714.555616] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  714.678168] Restarting kernel threads ... done.
22:18:19 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x1)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040))
write$evdev(r1, &(0x7f000004d000)=[{{0x2}, 0x0, 0x1}], 0xe0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = gettid()
process_vm_readv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000180)=""/166, 0xa6}], 0x2, &(0x7f0000000900)=[{&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/99, 0x63}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/111, 0x6f}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/95, 0x5f}, {&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/137, 0x89}], 0xa, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x9, 0x3, 0x3, 0x6})

22:18:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x88a8ffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:19 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/148, 0x54}], 0x100000000000038c, 0x401000000000000)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0x3, 0x7, {0x57, 0x1, 0x7, {0x20, 0x4}, {0x0, 0x1ff}, @cond=[{0x4, 0x9, 0x2, 0x7, 0x2, 0xffffffffffffffff}, {0x8000, 0x3ff, 0x10001, 0xffffffffffffff00, 0x8, 0x2}]}, {0x53, 0x80000000, 0x6, {0xfffffffffffffffc, 0x1f}, {0x19a, 0x7fff}, @cond=[{0x9, 0x8, 0x4, 0x2, 0xd64, 0x3}, {0x1, 0x4a, 0x77, 0x5c, 0x4, 0x4}]}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="ed")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  714.747493] Bluetooth: hci0: Frame reassembly failed (-84)
22:18:19 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
bind$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10)
openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:19 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x91, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x9effffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:20 executing program 2:
socket$netlink(0x10, 0x3, 0x1c)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040))
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x4, 0x5}, 'port1\x00', 0x9, 0x10000, 0x80000000, 0x2, 0x0, 0x4000000000000000, 0xffffffff, 0x0, 0x2, 0xae})
openat(r1, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4)

22:18:20 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={<r1=>0x0, 0x2, 0x7, 0x1, 0x101, 0x81, 0x0, 0x5, {0x0, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x200}}, 0x9, 0x57, 0xb9a4, 0x401, 0x4}}, &(0x7f0000000240)=0xb0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r1, 0x7fffffff}, &(0x7f00000002c0)=0x8)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000003c0)={{0x1, 0x3, 0x5, 0x3, 0x8}})
r2 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x0, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
fdatasync(r3)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r2, &(0x7f0000000480), 0x19d, 0x0)
delete_module(&(0x7f0000000340)='em0,--em0systembdev\x00', 0x800)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000380)={r1, 0x9, 0x8001}, 0x8)
connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0x5, 0x60000000})
sync_file_range(r0, 0x35, 0x400, 0x3)

[  715.445066] Restarting kernel threads ... done.
[  716.785501] Bluetooth: hci0: command 0x1003 tx timeout
[  716.790930] Bluetooth: hci0: sending frame failed (-49)
[  718.865506] Bluetooth: hci0: command 0x1001 tx timeout
[  718.870895] Bluetooth: hci0: sending frame failed (-49)
[  720.945537] Bluetooth: hci0: command 0x1009 tx timeout
22:18:29 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xb208000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:29 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x8, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x31c}], 0x35f, 0x0)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="5ab1f316bea2aed61dbbdf295897bb892c5ed14a31d93622c5e01ec4f781d74ac477f427b34a8795d07159d16248f8e6c546a93f0995babec9cd450e84b6c187f3c1a5ad2f5c55657bc9b80b43795781fc47f93ce3d404dee22fa4361b064baa09a175bfd563232833a248554f19f056eb7ec92472ec96a46c44ff8c888563d52f7ea830ccdc979704", 0x89, 0x4, &(0x7f00000000c0)={0xa, 0x4e21, 0xffff, @local, 0x7f}, 0x1c)
socket$inet(0x2, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000380)=0x4)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), &(0x7f00000003c0)=0x4)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r3)

22:18:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
listen(r0, 0x5)

22:18:29 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xb4, 0x101040)
accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x80000)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r1)
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r3, 0x2008000)
sendfile(r1, r3, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  725.056635] validate_nla: 2 callbacks suppressed
[  725.056645] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf0ffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:30 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=<r2=>0x0)
sched_getaffinity(r2, 0x8, &(0x7f0000000040))
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$TIOCNOTTY(r0, 0x5422)

22:18:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

[  725.375607] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = socket(0x0, 0x801, 0x80)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={<r1=>0x0, 0x7, 0x20}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={r1, 0x0, 0x9, [0x5, 0x4, 0x2, 0x24d, 0x7, 0x7b, 0x2800, 0x2, 0x100000001]}, &(0x7f00000003c0)=0x1a)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x10003, 0x0, 0x1e44, 0x3, 0x82}, 0xfffffffffffffff9, 0x5})
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x100)
ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000100)={@null, @default, 0x2, 0x44})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000240)={0x200, 0x100000001, 0x5, 'queue1\x00', 0x7})
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x3f, 0x1, 0xa5})

22:18:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfeff000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:30 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x41000008913, &(0x7f0000000080)="0adc1f023c123f3188a0700c4d1b303f0d708e669530a668639ed1fb898322ea8913")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

[  725.562418] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
userfaultfd(0x80000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4)

22:18:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xff0f000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:30 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x2080, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x100000000, 0x4)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xc00, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null='               \x00', 0x6, 'ip6gretap0\x00'})
ioctl(r2, 0xffffffffffffffff, &(0x7f0000000240)="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")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

[  725.807609] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  725.835886] Bluetooth: Invalid header checksum
[  725.840987] Bluetooth: Invalid header checksum
22:18:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffff7f00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  725.925840] Bluetooth: Invalid header checksum
[  725.930505] Bluetooth: Invalid header checksum
[  726.092393] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  726.174147] print_req_error: 173 callbacks suppressed
[  726.174167] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.185900] buffer_io_error: 173 callbacks suppressed
[  726.185910] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.218628] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.225073] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.247063] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.253515] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.262069] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:18:31 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)
ioctl$RTC_AIE_OFF(r1, 0x7002)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x24200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xfe}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8041}, 0x10)
socket$netlink(0x10, 0x3, 0x13)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000004c0)={0x18, 0x0, {0x1, @link_local, 'ip_vti0\x00'}})
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8)
r4 = semget(0x3, 0x3, 0x0)
semctl$SETVAL(r4, 0x3, 0x10, &(0x7f0000000100)=0xc7)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r3, 0x1, 0x6}, 0x10)

22:18:31 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0xfffffffffffffffc)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x400)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:31 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={<r1=>0x0}, &(0x7f0000000100)=0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x8000, 0x1, 0x7ff, 0x4, 0x0, 0x3, 0x100, 0x8, 0x3f, 0xfff, 0x1, 0x6c9e, 0x5, 0x40, 0x8, 0x5, 0x7, 0xec, 0xfff, 0x6, 0x80000000, 0x9, 0x3, 0x4, 0x2000000, 0x40, 0x100000001, 0x26e, 0x5, 0x6, 0x7, 0x2ae, 0x401, 0x6, 0xfff, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x100, 0x100000000, 0xdb, 0x5, 0x7, 0x0, 0x3e}, r1, 0x8, r0, 0xb)
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:31 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x401000000000)
sendfile(r0, r1, 0x0, 0x80000000000d)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus/file0\x00', 0x8880, 0x2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)

22:18:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xffffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  726.268549] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.276367] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.282795] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.348200] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  726.381142] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.387650] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:31 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000002c0))
ptrace(0x10, r0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x18400, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000400)=0x8)
ptrace$setsig(0x420a, r0, 0x0, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2100, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000340)={0x14, 0x69, 0x1, {0x8, 0x4, 0x7}}, 0x14)
r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$TCSBRK(r3, 0x5409, 0x3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
mq_notify(r3, &(0x7f0000000240)={0x0, 0x24, 0x1, @thr={&(0x7f00000000c0)="f9def3fb4275e529382d8025a9fe1b01c3f23f14e89065d3933f13f3c64944be15cea0d3003bf22944856d3ad30e4992b649e318a8288a5ec55cb3c127f0b50f94b918ecc8478932b1ee865a890c6bd18611", &(0x7f0000000040)="b5f756949a3344debec48bb818b0e7f94474a65dec47dd16fdeb23080612006a85497485b24e73b50e976922aec95f2dcbd8"}})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
preadv(r3, &(0x7f00000003c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x0)

22:18:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000001300)=""/121, 0x79}, {&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000001440)=""/182, 0xb6}, {&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000001540)=""/12, 0xc}, {&(0x7f0000001580)=""/29, 0x1d}], 0x7, 0xffffffffffffffff)

22:18:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xfffffffffffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x3, 0xaf9a, 0xc1d, 0x9, 0xb, 0x7, 0x4, 0x2, 0x7, 0x5a85, 0x0, 0x40})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  726.420376] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.426928] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.451641] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.458162] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.501402] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.507914] Buffer I/O error on dev loop0, logical block 0, async page read
[  726.584605] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  726.591141] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa600000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffff9c})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={r2, r3, 0xfff, 0xc4, &(0x7f00000001c0)="d9ee43b19b6eae906eb76e5c6669d9e966da06b8620ef73ab1738595d94f9e59f0b10b2043ac493c632c9147a6594393a54b188a496667e7d961865f6a5421d9113bbce6a1ab6d8e31bc983e66954316aea3c2e340b51145c555cfc25d085eaae23b6d35c91dddd9f10023e596a93e38e869c174b390a8cddf636fde21a9a9501e9a23ed657838138af34f5fd9f68163aac80265e5d000e021b4d2a013e9aeeddb82a27f6405992f914cee873a1d3c265ded95186a67faae7a6445c39e4a825490daa473", 0x8000, 0x8, 0x66a, 0x3, 0x9, 0x3, 0x0, 'syz1\x00'})

[  726.894678] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="02d2215db7b5a3309abd39c9b5db02e13c691d265f989a1b67f6f16e09dba0d30c767cd7e1c837ca39e25d8022cd87ee5a298ee1c1e81cc7dbf4fea8cd37ce72f8", 0x41, 0xfffffffffffffff9)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/232, 0xe8)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x185300, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$VT_WAITACTIVE(r0, 0x5607)

[  727.102975] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:32 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket(0x11, 0x806, 0x3)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3, 0x3, 0x65d8e01c725bcc68, &(0x7f0000ff7000/0x6000)=nil, 0x9})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
connect$x25(r2, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x12)

22:18:32 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000108912, &(0x7f0000000240)="0adc1f023cd4893188a070f90994053859d5e3affcce6aa91eb1cc8ee4196507a3bfe8948bb8643ff4d872fa097ee42d6871e6fffe8ef6f578e6a882b8c8346d0aec41be3922e7fd1d1463d9b0f3d46cb3d773f7282bec9934e79dd2a925e9f798821c984637714866c5ce952d9be001c042245874a6805980c075d1e3a6e4fda57af03c5adfad0a0d3dda74e061d160a8a6cc4c05587493408d0dfbce0bbe28c55e3d7e4b35df59002152747eb9259a054ef69b8ede2bd139f8")
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ftruncate(r1, 0x401)
write$P9_RVERSION(r0, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0xf2, 0x8, '9P2000.u'}, 0x15)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  727.285235] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:32 executing program 3:
syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00')
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x25e9, 0x2, 0x100000000, 0x101, 0x0, 0x1000, 0x1, 0x6, 0xff, 0x1})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f00000000c0))

22:18:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:32 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000040))
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x2, 0x9, 0x3ff}, 0x6)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

[  727.567756] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@pppoe={0x18, 0x0, {0x3, @empty, 'lo\x00'}}, {&(0x7f00000001c0)=""/147, 0x93}, &(0x7f0000000040)}, 0xa0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000140)=0xffffffffffffff98)
socket$unix(0x1, 0x0, 0x0)

22:18:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000200)=""/177, 0xb1}], 0x4)

22:18:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={<r1=>0x0, 0xfffffffffffffff9}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e23, 0x69e, @mcast1}}}, 0x84)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:32 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:32 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x1, 0x4)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:33 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/82)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000))
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))

22:18:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000240)=""/1, &(0x7f0000000280)=0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0045401, &(0x7f0000000100))
flistxattr(r1, &(0x7f0000000040)=""/144, 0x90)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x0, @raw_data="4fe9eab6b00147e99eb871f009c88386f36219e515a95ea6227d4266eb76383e31d5ba5c9eb660542d986acc4bb94f02ba8d118b77b5af1bd5b038d74c13701a9ffbb4cc7b52c5afc7f1c50700d34d729778e1f0eb83efcf9f0934b18f7b1c63b88c3267e7b7cd2935863800bb7a8987aae1c54adfd12f8b833142d827c00df7cb786332508f32409cffcb623a09e9792538ec1805d212cb6a043b6117d1af6d56ad3b5527acf8b5b69e3f3bb4f4d4d12c69777524f1ebd485ba333b959a3fa998f965ad5aeb8c85"})

22:18:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='netofib_trie,\xf1\x18>#H3st\x84\x8a\x9d\x9agq\xee\xa5[&.\x9d\xdd\x06g`t\x00')
preadv(r0, &(0x7f00000000c0), 0x0, 0x0)

22:18:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x4, &(0x7f0000000000)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000000), 0x7229e8cbcd7c408, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x7, 0x1, 0x5, 0x3f5680000000}})
pread64(r1, &(0x7f0000000240)=""/4096, 0x1000, 0x0)

22:18:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
prctl$PR_GET_FP_MODE(0x2e)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))

22:18:33 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
ioctl(r1, 0x1000008912, &(0x7f0000000040)="67b1b09c17b40cd6000000f7449fd141c0e2a56f6f7b35cc21c6a3ec78f86b65ca530000f74075b91f78a5f80a02c8e40b2ca4538e5ee43364dfe56798cc47716800a033fbf5428772be047654d20df4bad1c7a40aea80f0c6f4260a958b95a73b2d09473c6556867d5fac66f7aab562468e4d2a7c95648ad0d0e21d69b69e171202ea00")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:34 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)

22:18:34 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x10000)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000300)=""/137)
syz_extract_tcp_res(&(0x7f0000000280), 0x0, 0x3)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x240000, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000100)={0x0, 0x100000000, 0x301f, 0x1})
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}]})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r3 = getpgrp(0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000240)=0x100)
sched_getattr(r3, &(0x7f0000000200), 0x30, 0x0)
r4 = fcntl$getown(r0, 0x9)
r5 = syz_open_procfs(r4, &(0x7f0000000140)='net/fioI\x00\x00iestat\x00')
preadv(r5, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:34 executing program 1:
r0 = inotify_init1(0x80800)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="921eb821ec3f73a5fbc574b6d76240a5af5198bc4aa8e1a0b292d788cf35da1ca4ae8c2248be623b5e00a5be1f0310b03166517e4432e55c8e86d7af84acadbb2bcb809c9f25735fde862c82cdd39251e03e86ebf7")

22:18:34 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r1=>0x0, r0, 0x0, 0xa, &(0x7f0000000040)='m+procem0\x00', 0xffffffffffffffff}, 0x30)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net\b\x00ib_t5ies\xa4at\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:34 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000001340))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000013c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x1d, r1}, 0x10, &(0x7f00000014c0)={&(0x7f0000001440)=@canfd={{0x2, 0x96, 0x2}, 0x3f, 0x3, 0x0, 0x0, "c3b624c9d950563dd6b3de3180b6b1d0497cc187797fc0fd05f24c95ec843d8af613049fc40ebe3f1c5c1cdd981aab447ae268f36598561fcb6fe401c335300b"}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
connect$inet6(r0, &(0x7f0000001540)={0xa, 0x4e20, 0x6, @loopback, 0x7f}, 0x1c)
recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x3, &(0x7f0000001280)=""/110, 0x6e}, 0x10000)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1f, 0x100)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r1=>0x0)
getpgrp(r1)

22:18:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:34 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7fff, 0x3, 0x4, 0x2eeb, 0x2, 0x3ff, 0xb57b, 0x7, 0x40, 0x7, 0x7ff, 0x1, 0x5, 0xffffffffffff0000, 0xaa13], 0x1000, 0x100100})
preadv(r0, &(0x7f0000000480), 0x0, 0x0)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

22:18:35 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8)
r3 = getegid()
write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x7, {0x0, 0x1, 0x1, 0x80000, 0x9, 0xdae7, {0x4, 0xffff, 0xfffffffffffff99e, 0xdc7, 0x9, 0x100000000, 0x1, 0x9, 0x8, 0x8, 0x1, r2, r3, 0x8b, 0x4}}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r4, 0x2008000)
sendfile(r0, r4, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, r1}, 0xc)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:35 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
fsync(r0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80400210}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_delrule={0x3c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x80, 0x20, 0xffff, 0x1, 0x0, 0x0, 0x7, 0x11}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_hsr\x00'}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44800)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000040))

22:18:35 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r0, 0x1000000000000000, 0x1000, 0x4000})
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x34})

22:18:35 executing program 1:
r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80800)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0xffffffffffffff00}], 0x1fa, 0x3)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

[  730.289271] validate_nla: 7 callbacks suppressed
[  730.289280] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:35 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040))
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  730.600731] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2c6a640000000000, 0x400)
write$P9_RUNLINKAT(r0, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = getpid()
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='n\xf4v/fib_triestat\x00wP\x16\xde>\x80\xdf\x9c\xc5\x89\xd3z\x96\x04')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:35 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:35 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:35 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x400000000004, &(0x7f0000000000)="0adc1f023c123f3188a070")

[  730.950454] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:36 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={<r2=>0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffffffffffffa43, 0x1000, 0x81, 0x7f, 0x1}, &(0x7f0000000000)=0x98)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r2, 0x2, 0x10, 0x0, 0x6}, &(0x7f0000000180)=0x18)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:36 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x1}, 0x2)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x20, 0x40)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')

22:18:36 executing program 3:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', r1})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x2)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x200)
openat$cgroup_subtree(r3, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
sendmsg$key(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x2, 0xe, 0xfffffffffffffffb, 0x9, 0x2a, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x17, 0x4e21}, @sadb_x_sa2={0x2, 0x13, 0xe41, 0x0, 0x0, 0x70bd2c, 0x34ff}, @sadb_lifetime={0x4, 0x0, 0x100000001, 0x1, 0x0, 0x8}, @sadb_key={0x1d, 0x8, 0x6e0, 0x0, "e2f2179d2919cb533d2f7b0c72ee69946602e06f421573dbc4ee05549e708ef955eb8fbd29921a0461e6e1a40a8b66b31976615db9cc086f395383e4ec051b30007462d86dc74e0d91001f006d6cf13463f5c6de9495b2671c0136466a1025b641f08caf6b8bc1b45ba366bf418477388f2964fcc204ef4f0936e95088d3e975b1693382b5aa75534fddcb02fa62bb5d33c9b38c5ddf3785110a054fac05545adfeb4b3129705965172508b6916a3a159c01cb62c602d913aa84eecbf2d7cd4a648f9f7d9dcf89b13bd60c36a81d794b1bf447ea6ecb593aa243a40c"}, @sadb_ident={0x2, 0xb, 0x80, 0x0, 0x80000000}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_type={0x1, 0x14, 0x499}]}, 0x150}}, 0x8000)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x28)
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x8)

[  731.268677] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  731.347904] print_req_error: 295 callbacks suppressed
[  731.347914] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  731.359672] buffer_io_error: 295 callbacks suppressed
[  731.359683] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:36 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001540)=""/148, 0xffffffffffffffac}], 0x1, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x0, 0x8, 0x3, 0x1, 0x7})
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/250, 0xfa}, {&(0x7f00000013c0)=""/138, 0x8a}, {&(0x7f0000001480)=""/184, 0xb8}], 0x4, 0x0)

22:18:36 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202800, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000580)={0x200, 0x1, 0x8001, 0x6, 0xf5, 0x2, 0x0, 0x7, r2}, &(0x7f00000005c0)=0x20)
preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/240, 0xfffffffffffffd51}, {&(0x7f00000003c0)=""/137, 0x89}], 0x2, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600)="63b4e8f4bb6c0a5d7148127f02f5a8c359d547daf7aeda108fb4ea81f6cb2496a05d43a13916f57879505fbf9dac8f7d6100e4816bf8a4c654b1d39e233e442c29231fda3c979aecd6c9d6dab02b23148794d6b74ab7ea6318d65a3e721f305ea8ce62456d94d6db0b278b0d106e03a631", 0x71)
getrusage(0x0, &(0x7f00000004c0))
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})
sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f00000027c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000000)={0xfffffffffffffffb, 0xffb702, "4e3e5976c70bdd510d8d8dd1ff905b4ce3a1632c03300326", {0x2, 0x6}, 0x5})
preadv(r4, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  731.490125] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  731.496676] Buffer I/O error on dev loop0, logical block 0, async page read
[  731.643528] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  731.650079] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:36 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8, 0x400)
getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000180)=""/62, &(0x7f00000001c0)=0x3e)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x80, 0xd4, 0x771c, 0x9, 0x800, 0x800})
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0)

[  731.708551] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  731.807707] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  731.814204] Buffer I/O error on dev loop0, logical block 0, async page read
[  731.889592] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  731.896147] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:36 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8802, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x8000, 0x8)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x7f, 0x81, 0x10000, 0x80000001})
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  731.955740] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  731.962211] Buffer I/O error on dev loop0, logical block 0, async page read
[  731.985560] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  731.992012] Buffer I/O error on dev loop0, logical block 0, async page read
[  732.039009] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  732.045499] Buffer I/O error on dev loop0, logical block 0, async page read
[  732.086947] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  732.105581] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  732.112008] Buffer I/O error on dev loop0, logical block 0, async page read
[  732.166344] Unknown ioctl -1071094257
[  732.190481] Unknown ioctl -1071094257
[  732.225557] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  732.232037] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:37 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:37 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/91)

22:18:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  732.556811] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:37 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001700)=<r2=>0x0)
r3 = getuid()
getresgid(&(0x7f0000001740)=<r4=>0x0, &(0x7f0000001780), &(0x7f00000017c0))
r5 = getpid()
stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getpgid(0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001940)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001a40)=0xe8)
r10 = getegid()
sendmsg$unix(r1, &(0x7f0000001bc0)={&(0x7f0000001280)=@file={0xcaf69ee6f39188cc, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000000)="9e365bb0d7c936e895157d91923ee4822ca244254c7505f15b2fed6e4dcebdc7f8d8308195dd6ccc6a38c7b455c31e46b0cc6464df0d9e2c2e8e", 0x3a}, {&(0x7f00000013c0)="2ada6997ed1a62a744d368041b1cf50f56109866aec5ae336d6fb97dd285319958966235ecd61d5c437791a80cccf1b37329f16e855bf7bdf346ac0e56d4db2a96518e66f5e28fbdac8d5bfbed44c9f7179cab2c0837fd015a6f628abe7d19422237225cd53fe80e183b40738962ca15b030bdfc47f43ab2bc7327e850cab1703e383fdf9c2381efbfd140b5159ebd09", 0x90}, {&(0x7f0000001480)="3471aedb4e57044349fccdd8cbe19e5075e71dda382a9c57b25c83f4f53c8e13f73b0b8ed45dd31f60efbd220bf6901eb77c022f239aece0b63a53ca557514fd9d57c38e18be800412ca9bb5914db86e09d683096f2c46357cdf612f47748ecbbfc45193b4e56d9f0d063792168fcd07bfd605517de5dfb1f7989221aea7fb8ad6ee9a55b8cff1cb1ebab95b31c44ae46993183c24575e5b8e038cb96d2ef2d50bcde63bcab62e04175280b034bf7d41dac14bc4cd547de5790f5544a3d770a7db0943d5f32ad560ed1ea4c110f5e91c0ed3", 0xd2}, {&(0x7f0000001300)="c3e02897b82db9b22bc1e423972129f9ae5ff2e1c67de781e04bba0d5b9e0f0c7c40d132035cd9c50b9dfde497798dacfa3ef493557ba6ae26f2f03043d59129e9124560697befb81ce4", 0x4a}, {&(0x7f0000001580)="17029f8a585bf8640b2253c437861f473617ffb45d8531a06ff391c64f3ae01e86ac5605a9de0231ddab8cf06b54d7bd487cdcfbb44f3980c8319a93c0e5fdd28336f016c3cd0838fd50aae9522adb99cc33140d96956c690a2d50e8d4b2910d08b4ba6ecc7afb8d3c79bb90e199c0329e721eeeb786e19c4c4b9916477786adb864b22a48ba8b7c71d9872af6ebae3b4f7b193783993dde07d57453052e0d3f262ad16c80ab735f5de66e7e400894f56ceb1ac793d97b0914b417208d50cad4822196ba7c5efb1deac612488df7d0f9b47d6c713f07feadb8315aabd1ba4069525c0353294e2706df8670169904", 0xee}], 0x5, &(0x7f0000001a80)=[@rights={0x38, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1, r0, r1]}, @rights={0x30, 0x1, 0x1, [0xffffffffffffff9c, r1, r1, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x128, 0x801}, 0x20000000)
write$P9_RWSTAT(r1, &(0x7f0000001c00)={0x7, 0x7f, 0x2}, 0x7)
preadv(r1, &(0x7f0000001240)=[{&(0x7f0000001280)}, {&(0x7f0000000040)=""/211, 0xfffffffffffffe77}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x3, 0x0)

22:18:37 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:37 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x81, 0xffffffffffff6ce6, 0x3, 0x401}, 0x6)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='bpq0\x00')
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
fcntl$addseals(r1, 0x409, 0x0)

[  732.881055] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:37 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KDSETLED(r0, 0x4b32, 0x3)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1280}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x5ac757b1a9cd490b, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xd11a3ed844951c6f)
ioctl(r1, 0x46d5, &(0x7f0000000280)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240))

22:18:37 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000001640)='./file0\x00', 0x128)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x3200}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x41}, 0xc4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000000c0))
preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:38 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x327ad5ab)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={<r3=>0x0}, &(0x7f00000000c0)=0xc)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000240)={r1, r0, 0x1f})
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000480), 0x20000000000000fc, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000280)={<r6=>0x0, 0x9}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r6, 0x9}, 0x8)

[  733.285836] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:38 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
ftruncate(r0, 0xc341)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x43, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:38 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = add_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="d3b8d94324d8d2eece8bb516994dbf52820e61fe520eeed5ad1fdfe97937a90c5100abef75c86ee73b77cc98510cc03eab8f81c558dbc7b6a98f6cb3cfbfee1f999dd9cac2a79d71a580261248dd6650644a6288badf10b07ab4fdf13c2a5514e3e9bc4ae61232a17facee98eb0f19c8293c4b66128144ec89ede22a0ed3fffce73c", 0x82, 0xfffffffffffffffa)
keyctl$revoke(0x3, r2)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x1, "78e245a6cbc0281921b3564643f0223fbb109242f3f6007d924cd33e1ccc3d46", 0x1, 0x80, 0x1, 0x2000000, 0x104, 0x8})
preadv(r0, &(0x7f0000000480), 0x342, 0x40000000)
readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/69, 0x45)

22:18:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x25c0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x7fff, 0x5, 0x7, 0x401, 0x0, 0x82b, 0x800, 0x0, 0x1, 0x3, 0x8000, 0x9, 0x73, 0x0, 0x0, 0x1, 0xffffffff, 0x4000000000000, 0x10001, 0x1, 0x8, 0x101, 0x2, 0x100400000, 0x3, 0x1f, 0x5, 0x400, 0x1000, 0x9, 0x0, 0x5, 0xf0, 0x10000, 0x8001, 0x7, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x20, 0x100, 0x0, 0x7, 0x6, 0x8001})

22:18:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
r1 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x7fff, 0x3, 0x8, 0x6, 0xa72, 0x3, 0x3e, 0x10000, 0x2f6, 0x40, 0x11b, 0x7fffffff, 0x2, 0x38, 0x1, 0x15e7, 0x320, 0x400}, [{0x0, 0xff, 0x3, 0x8, 0x4e0, 0xfffffffffffffff8, 0x6, 0x3}, {0x0, 0x2, 0x8, 0x6, 0xf6e, 0x7, 0x7, 0x4}], "", [[], [], [], [], [], []]}, 0x6b0)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  733.565194] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:38 executing program 1:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x80, 0x0)
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000280)={0x6, 0x2})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x401, &(0x7f0000000480)="007be0eda94b0746c53da6875ed869b5a070")
readlinkat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/213, 0xd5)
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8)

22:18:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:38 executing program 0:
stat(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = getgid()
getgroups(0x2, &(0x7f0000000040)=[r0, r1])
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={<r4=>0x0, @in={{0x2, 0x4e20, @broadcast}}, 0xb9, 0x90c6, 0x1, 0x3, 0x5}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x5e, 0x4, 0xe2, 0x401, 0x80000000, 0x7, 0x8, r4}, &(0x7f0000000280)=0x20)
ftruncate(r3, 0x2008000)
sendfile(r2, r3, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:38 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000100)={0x7, 0x100, 0x7, {0x8000, 0x2, 0x7, 0x2}})
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
syz_extract_tcp_res(&(0x7f0000000000), 0x5, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x103}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {<r1=>0x0}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={r1, &(0x7f0000000240)=""/199})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @empty, 'veth0_to_team\x00'}}, 0x1e)
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:39 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:39 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8200, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x2110, 0x4, 0x3}, {0x1, 0x3, 0xfd, 0xacf}, {0x1000, 0x7, 0x6}, {0x5, 0x40, 0xfe, 0x9}]})
flock(r1, 0x2)

22:18:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x301}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:39 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5)
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'wlan0-'}, {0x20, '/dev/radio#\x00'}, {0x20, '+'}, {0x20, 'GPL[^eth0$trustedvmnet1em1@\'eth1vmnet1self'}, {0x20, '/dev/radio#\x00'}, {0x20, '#selinuxeth1lowlan0'}, {0x20, 'posix_acl_accesseth0'}, {0x20, '/dev/radio#\x00'}, {0x20, '/dev/radio#\x00'}], 0xa, "d94f6d342644e565ea7f562a32eb71f69ffa7f9f65e130bb67d7d48024268a2f841d18be578f0c793136cbc1551f3358628c842c6b6f3a7a880ad4520a6b"}, 0xda)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "89d86f5f2ff063c7dbdd7bdfb088edfa4aad57db"}, 0x15, 0x1)

22:18:39 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfffffffffffffffd)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x0)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3)
inotify_init1(0x80000)
syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x8000)

22:18:39 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-control\x00', 0x200000, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000007c0)="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")
sendfile(r0, r2, 0x0, 0x80000000000d)
sendmsg$tipc(r2, &(0x7f0000000740)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="8cfe48a89194d4f471270d7fe7d91c135a80b5cbb4b1ace79b16845173ebfebd06e79620e1dcfbcecf2ba8bf93c002594e81784b5feedadfb52a00fb0c422a5ff7f32b24c88c91243e2599c02c7c48ceb8749365664deea3927bfa73d84760968bfc25f788a998c5dd75eb7fcb477b46594880710f1d542a2bd5f9a60090c209789816bd050d14d13fcfefd8270203073e547fbbec4cad3edbb234d2daa6", 0x9e}, {&(0x7f0000000040)="47304860af26233e8e4623174ec4bd2bc732a1a128b5b307d9333ca5e666146d", 0x20}, {&(0x7f0000000180)="2054f91c3b95835b2aad6d7cbba2afda13a0a3a7068b5bca708254cc78de82bf1b80e50a06320a31783192685957006b89ad3e446e2e43f6955ef7bbe91c110ec543a8f5598b49046e6a02bebb50e029259e32", 0x53}, {&(0x7f0000000200)="42b8d9badce6ff4448257fe93e3f1d01aa47b050946441b2d73ae770e64fbd780f0a3a0b6001601df475aa938a0ecca86cf72c7753ced08288459e63d746aea674efef61e3ecc3bd63979cbd4c4f221da69338033efe3ef7aaf5bb5f2dc0d846cf288e469fae4953e25a1e53239283d984f037b88d022fbc59cc209a62ef806fc314be42441e235eef26554568", 0x8d}, {&(0x7f00000002c0)="effc32ea056af3fbad6378045f61dd5d40d321f48141dae44221dc786898d9071192ecf5c88355b6b42aee0a35cf90504d34f9c302a583225d5e875f365d743519", 0x41}, {&(0x7f0000000340)="6be7947c4c064939961d47503fb4d247e47c8a7a9770fafe054597d27872e826e67e1a9e01346c805b98e53a7f82d22ac468ca0f1c02e44f85ebbf4fc6b6cb6d4f2d764d4a2b0534a4fb8a7bdec13b60595a63a8f5d1843b9ee6b0140c93043306733d993fc5b3c67c996612eccec09615dfcc192b19d97358496dbb255bc90c743e6c7888184848a4e765a76e1a7f36c045e6d5188bd1b72efceb800562e9909fee2fc29e4248f933d9bc83d49033621784f6", 0xb3}, {&(0x7f0000000400)="59b2bfa1151930ef910710fc92b6c4567344e9fa5383b5c7449281906618f3360c", 0x21}, {&(0x7f0000000440)="d6c8dc0c1a9d3bda8a5b56513e31a2936dd2ad1222aefe401c6b74ba3802db759e80297536fdca40f903de49aa359e1210a908f3494c0b8c2ec4c4adb5", 0x3d}, {&(0x7f0000000480)="ab8d74560296041044bc1c3998afb10d1eca0e1e584f3a543382f12189669d972e6995a93040a7800b79e930a287f68c771b1a37381f3ac70cf90c65abea3faa2e94ac56f3cdc9b3b164137e7ec2800c14f40aa1f2fbeef08f4fa705085bbbd624af165a39c254d12fad4250b80bbfded7af73ff15a6f37482b59e08018787c2e810ee1e6b139a01f7bd0f00fbb806ec74fb8a406d4992ff0b233848d6d307ff81297b01088630e8077e9f808530f86d4789091f5174f4d4baf64e6014bf930b18f917edca8290c088100daf963ad2a284a6f16b52", 0xd5}, {&(0x7f0000000580)="2d6cb575a561c3266df2c3e4cbb0b12efd753894559af15ce46195e7b77b1bed9fe929338f130c2754ffa53ade4fb6fe87dc283db215d13a32ec61964b84d8dff486ddf8b101488b14305cfa1321d3900ae7addf2cbf352ee77c9d8f6c32e52aa369d7718fd9e56bc290be7ceaa307cf445900569f420886fb6d497e9dd74a532d49d40e", 0x84}], 0xa, &(0x7f0000000700)="df8c67f3c8d87a098e9183148563f3a110a332e985fe2b", 0x17}, 0x4)

22:18:39 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socket$rxrpc(0x21, 0x2, 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x23c, r2, 0x420, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ddc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5cd0af01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x2, 0x100, {0x3, 0x1f}, {0xfffffffffffffff7, 0x2529c81a}, @rumble={0x7, 0x13b}})

22:18:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:39 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x1, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000280)='syz1\x00', 0x1ff)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r2 = socket$inet6(0xa, 0x800, 0x41)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0xfffffffffffffffc, 0x8003, 0x80000000, 0x81, <r3=>0x0}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}}, &(0x7f00000000c0)=0x84)

22:18:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x0, 0x8}, 0x5}, 0x20, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0)

22:18:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7e3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0xfffffffffffffffe, 0x5}, {0x66, 0x3}], r0}, 0x18, 0x1)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
getpeername(0xffffffffffffff9c, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80)
getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=0x4)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10002, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000500)={0x17, 0x61, &(0x7f0000000480)="5d82ebf1ccd414324eb7b734b3346154d241f606f9eba2b6ff8b312cad02ba63b9019ee9536a7a22b6e0f5e9164d6d3bb04ff6f731b474072846162abc003ff8aa7e77cba55b8c5d56421382cc594a949d5bd4da7ef8e1c926e28e636b1429b845"})
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:40 executing program 2:
r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x20000000, 0x8}, {0x8, 0x9}]}, 0x14, 0x3)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000240))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
io_setup(0x0, &(0x7f0000000080))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:40 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x8001, 0x2502})
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x700}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:40 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={<r3=>0x0, 0x3, 0x30}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e23, 0x7f8, @mcast2, 0x1000}}, 0xffffffff, 0x302, 0x1, 0xff, 0xffffffff}, &(0x7f00000001c0)=0x98)
sendfile(r0, r2, 0x0, 0x3)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:40 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:40 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$kcm(0x29, 0x2, 0x0)
pread64(r0, &(0x7f0000000000)=""/28, 0x1c, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00')
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)={0x3, {{0xa, 0x4e24, 0x5, @local, 0x3}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x17}, 0xb8e4}}, {{0xa, 0x4e20, 0xff, @mcast1}}, {{0xa, 0x4e24, 0x2, @local, 0x7ff}}]}, 0x210)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  735.429045] validate_nla: 7 callbacks suppressed
[  735.429054] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8b2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x0, 0xffffffffffffffff)

22:18:40 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x9)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0)
write$P9_RFLUSH(r1, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x6, [0x2, 0x4, 0x2, 0x9, 0x7ff, 0x8]}, &(0x7f0000000140)=0x10)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:40 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)

22:18:40 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:40 executing program 1:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
fcntl$addseals(r2, 0x409, 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x3)
syz_open_pts(r1, 0x501080)

[  735.633340] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:40 executing program 4:
keyctl$unlink(0x9, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001240)="2e0000002a00815f00000000000000cf1200b0eba0b4d65cdbaa18b29c473da67e3d743298cbb3001be63e75c80b", 0x2e}], 0x1}, 0x0)

22:18:40 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:40 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:40 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8)
setresuid(0xffffffffffffffff, r1, r2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  735.972480] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:40 executing program 4:
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x181, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)

22:18:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:41 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/122, 0x7a}, {&(0x7f0000000080)=""/180, 0xfffffe93}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f00000005c0)=""/18, 0x12}, {&(0x7f0000000440)=""/210, 0xd2}], 0x6, 0x0)

[  736.261427] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:41 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0xae3)

22:18:41 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3008})

22:18:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={<r1=>0x0, 0x0, 0x800000000000})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={<r2=>0x0, 0x80000, 0xffffffffffffff9c})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1, r2, 0x7})

22:18:41 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20100, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0x1000, "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"}, &(0x7f0000000040)=0x1024)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x0, 0x4)
syslog(0x9, &(0x7f00000013c0)=""/4096, 0x1000)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1c)

22:18:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:41 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.nlink\x00', &(0x7f0000000480)=""/102, 0x66)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)

22:18:41 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x7fff, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x2)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x20000, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x200800, 0x2)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x20000, 0x0)
openat$cgroup_type(r3, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180))
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x5, 0x0, 0x4})
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)

22:18:41 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(r1, 0x7fffffff, 0x2, 0x1)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  736.827212] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  736.844700] print_req_error: 417 callbacks suppressed
[  736.844713] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  736.856454] buffer_io_error: 417 callbacks suppressed
[  736.856464] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:41 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$set_timeout(0xf, r2, 0x200000000e)

22:18:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  736.924385] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  736.930894] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:41 executing program 4:
socket$pptp(0x18, 0x1, 0x2)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000000)=0x80)
close(r0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4a2000, 0x0)
clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1f)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x20032600)

[  736.983872] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  736.990415] Buffer I/O error on dev loop0, logical block 0, async page read
[  737.025774] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  737.047086] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  737.053585] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)

[  737.103629] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  737.110191] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:42 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="a99f83b7a3c5852535470102b5742897b1", 0x11}], 0x1, 0x8000000000000)
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="e4bf046485c3b7a0266aaede48830124e4c410a016", 0x15, 0xffffffffffffffff)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/211, 0xd3)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  737.164907] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  737.171479] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  737.248500] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  737.254966] Buffer I/O error on dev loop0, logical block 0, async page read
[  737.296360] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  737.302911] Buffer I/O error on dev loop0, logical block 0, async page read
[  737.330000] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  737.336567] Buffer I/O error on dev loop0, logical block 0, async page read
[  737.347028] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  737.351472] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  737.353531] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x800, 0x100)
fstatfs(r0, &(0x7f0000000240)=""/148)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)={0x0, @speck128})
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x1, 0x4, 0x7ff, 0x8001, 0x0, 0x9})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:42 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/211)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0)

22:18:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:42 executing program 4:
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x101, 0x0)
sched_setaffinity(0x0, 0x181, &(0x7f0000000180)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)

22:18:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x7, 0x400, 0x28})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:42 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@remote={[], 0x0}, 0xb, 'eql\x00'})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:42 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r2, 0x10, 0x0, @in6={0xa, 0x4e21, 0x0, @empty, 0x3f}}}, 0xa0)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

[  737.652317] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x3)

22:18:42 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x9, 0x3, {0xffffffffffffffff, 0x42, 0x8001, 0x0, 0x8}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
shutdown(r1, 0xffffffffffffd)
preadv(r0, &(0x7f0000000480), 0x0, 0x8000000000000)

[  738.017649] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:43 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0xc0, 0x8, 0x6, 0x1, 0x81, 0xd1f})
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  738.315107] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @broadcast}, 0x10)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x800, 0x20000)

22:18:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400480, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:43 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync_file_range(r1, 0x7fffffff, 0x2, 0x1)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:43 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x100000a9, 0x4)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1075, 0x14, 0xb, 0x605, 0x70bd2c, 0x25dfdbfe, {0x3, 0x0, 0x1}, [@typed={0x14, 0x44, @ipv6=@loopback}, @typed={0xc, 0x52, @u64=0x4}, @generic="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", @typed={0x8, 0x8f, @fd=r1}, @nested={0x8, 0x89, [@typed={0x4, 0x51}, @generic]}]}, 0x1044}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

22:18:43 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000000), 0x0, 0x0)

22:18:43 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="16424418bd37abc339dd313524b12c473d40eae05d8a581b1c33d4b40aca03916da6df420029a161daaae373ce71bea152fa3ca4ac"])
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000200)=""/30)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
connect$caif(r0, &(0x7f0000000000)=@dbg={0x25, 0x7fffffff, 0x31e5}, 0x18)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x9)
ftruncate(r2, 0x2008000)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
sendfile(r0, r2, 0x0, 0x80000000000d)
connect$caif(r2, &(0x7f0000000180)=@util={0x25, "70c855c97608f42dbaa5130048bba4d1"}, 0x18)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:43 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x2, 0x4)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x4000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0xfffffffffffffffa, 0x7ff}, 'port0\x00', 0x8, 0x1000, 0x7, 0x3ff, 0xfffffffffffffffc, 0x8001, 0x5, 0x0, 0x2, 0x101})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:43 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:43 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/203)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12000040}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="e001000d305146d500", @ANYRES16=r2, @ANYBLOB="000026bd7000ffdbdf25050000002400090008000200fb090000080001003b060000080002000700000008000100090000000c0006000800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f00000003c0), 0x0, 0x0)

22:18:43 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:44 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/211)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0)

22:18:44 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x4000007c)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:44 executing program 1:
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={0x0, <r0=>0x0})
ptrace$peek(0x1, r0, &(0x7f0000000100))
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1, 0x0)
ioctl$NBD_DISCONNECT(r2, 0xab08)
r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname$tipc(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10)
ioctl(r4, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r3, &(0x7f0000000480), 0x19d, 0x0)

22:18:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)={<r2=>0x0, 0x8, 0x2, [0x5, 0x9]}, &(0x7f0000000040)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x71e6}, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:44 executing program 1:
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0xfffffe9d}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000000)={0x3, 0x1, [0x5, 0x80000000, 0x0, 0xfffffffffffffe00, 0x28, 0x6, 0x20, 0xf]})

22:18:44 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:44 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/211)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0)

22:18:44 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
io_setup(0x1ff, &(0x7f0000000000)=<r1=>0x0)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000340)={0x100000000, 0x7, 0x5})
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x200000, 0x0)
ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x40003, 0x0)
io_submit(r1, 0x3, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000040)="09d5d3a08eb2e16a7499c0e873e23b931ceaaf64d2abaac3", 0x18, 0xffff, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000140)="e04edeca2a49c08e66d54fa99d9276ea5144f5aa9008eb4973f4caa70b8be3f8d17f", 0x22, 0xe1a1, 0x0, 0x0, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000240)="a24c7e406f6c19e4c7a1f77160c3f27e14e769", 0x13, 0x9ab, 0x0, 0x1, r3}])
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
connect$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x1000, {0x6, 0x7f, 0x5, 0x4, 0x0, 0x11b0}, 0x2, 0xfffffffffffffffc}, 0xe)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6558}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2)

22:18:44 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xb, {0x6, 0x5, 0x7, 0x5}})
r2 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x10)
inotify_rm_watch(r0, r2)
preadv(r0, &(0x7f0000000480), 0x0, 0x0)

22:18:44 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/211)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0)

22:18:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:44 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x7e, "1af8740fc339e476a99f6791b6edbe13c22cce5eed7aa8c7fb4079a6b6d914b9bed2a8d72051c527b803e3d9a0eac007b3621947b9ee9a48588d4eb4de54584a837613aec35b2ab0c6465e4089ff77c7c1c414bb1d0629b59cd5700c7f80d59a7f8bfbc584524f431a876b15a3791736421dae94b2807dc4ee07fdf98a8a"}, &(0x7f00000000c0)=0xa2)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000240)={0x5, 0x1, @raw_data=[0x6, 0xf4c, 0x6, 0x6b1e, 0x40, 0x3ff, 0x8, 0x1, 0x1, 0x5a6, 0x200, 0x8, 0x8, 0xdbf, 0x1000, 0x9]})

22:18:44 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/211)
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)

22:18:44 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:45 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101080, 0x0)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000001c0)=""/173)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:45 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/211)

22:18:45 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
recvmmsg(r1, &(0x7f0000005880)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000080)=""/56, 0x38}], 0x2}, 0x7}, {{&(0x7f0000001240)=@caif=@util, 0x80, &(0x7f00000013c0)=[{&(0x7f00000012c0)=""/148, 0x94}, {&(0x7f0000000100)=""/40, 0x28}], 0x2, &(0x7f0000001400)=""/210, 0xd2}, 0x10000}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/210, 0xd2}, {&(0x7f0000001700)=""/204, 0xcc}, {&(0x7f0000001800)=""/200, 0xc8}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/150, 0x96}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/204, 0xcc}], 0x9, &(0x7f0000004b80)=""/170, 0xaa}, 0x6}, {{&(0x7f0000004c40)=@vsock, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004cc0)=""/36, 0x24}, {&(0x7f0000004d00)=""/106, 0x6a}, {&(0x7f0000004d80)=""/141, 0x8d}], 0x3, &(0x7f0000004e80)=""/28, 0x1c}, 0x7}, {{&(0x7f0000004ec0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004f40)=""/52, 0x34}, {&(0x7f0000004f80)=""/50, 0x32}, {&(0x7f0000004fc0)=""/228, 0xe4}], 0x3, &(0x7f0000005100)=""/10, 0xa}, 0x9}, {{&(0x7f0000005140)=@l2, 0x80, &(0x7f0000005740)=[{&(0x7f00000051c0)=""/157, 0x9d}, {&(0x7f0000005280)=""/7, 0x7}, {&(0x7f00000052c0)=""/52, 0x34}, {&(0x7f0000005300)=""/151, 0x97}, {&(0x7f00000053c0)=""/175, 0xaf}, {&(0x7f0000005480)=""/228, 0xe4}, {&(0x7f0000005580)=""/14, 0xe}, {&(0x7f00000055c0)=""/211, 0xd3}, {&(0x7f00000056c0)=""/12, 0xc}, {&(0x7f0000005700)=""/10, 0xa}], 0xa, &(0x7f0000005800)=""/106, 0x6a}, 0xfffffffffffeffff}], 0x6, 0x0, &(0x7f0000005a00)={0x0, 0x1c9c380})

22:18:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7400}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  740.478503] validate_nla: 9 callbacks suppressed
[  740.478512] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:45 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8)
r3 = getegid()
write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x7, {0x0, 0x1, 0x1, 0x80000, 0x9, 0xdae7, {0x4, 0xffff, 0xfffffffffffff99e, 0xdc7, 0x9, 0x100000000, 0x1, 0x9, 0x8, 0x8, 0x1, r2, r3, 0x8b, 0x4}}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r4, 0x2008000)
sendfile(r0, r4, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:45 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2400, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', <r2=>0x0})
accept$packet(0xffffffffffffffff, &(0x7f00000016c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001700)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001840)={'bpq0\x00', <r4=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001980)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000001a80)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001d00)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000001e00)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000021c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4242000}, 0xc, &(0x7f0000002180)={&(0x7f0000001e40)={0x31c, r1, 0x206, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xe4, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x101, 0x961b, 0x4, 0x8}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x20, 0xfffffffffffffffb, 0x3, 0xffffffff}, {0x2, 0xffffffffffffffff, 0x5, 0x4}, {0x4, 0x101, 0x7fff, 0x7}, {0x800, 0x4, 0x401, 0x8000}, {0x4, 0x6e79de9f, 0x20, 0x6}, {0x8001, 0x10000, 0x7fffffff, 0x64}, {0x1, 0x5, 0x7, 0x8c2}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ef6}}}]}}, {{0x8, 0x1, r3}, {0x214, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
pipe(&(0x7f0000000000))
r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r7, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  740.748320] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:45 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:45 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8100}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:45 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:45 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  740.971263] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xb208}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:46 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x4, 0x8000)
ioctl$RTC_WIE_ON(r0, 0x700f)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x12c, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @remote, 0xfffffffffffff800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaa}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9e0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x18ed}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x55cbd384}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x36b}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b82bb83709d518a387ebfa624a9be2b6e8cd9de1b3933e54879b047799732fcdcd2e746924c5bdf6cab3b7a5aca377de849702f8178636823757d609b5892c0dc86ce7"])
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000000)={0x3, "e190befb839ca75350dea77497443d0dcda6cb04599fd2596726ecf9fba403730c2050180de65ca6474ceb5712142f6ed28119ca5a3555cb59d099b4b58703d33335b15bf2c917e5a357e5ab0d0db8fcbb24c95de435c40d1459732ac946d47603c923592f5dd928571c2c7f52b270c17111508f7cf78a108249bb90b001733f"})

22:18:46 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  741.235948] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r1, 0x9}}, 0x10)

22:18:46 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8)
r3 = getegid()
write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x7, {0x0, 0x1, 0x1, 0x80000, 0x9, 0xdae7, {0x4, 0xffff, 0xfffffffffffff99e, 0xdc7, 0x9, 0x100000000, 0x1, 0x9, 0x8, 0x8, 0x1, r2, r3, 0x8b, 0x4}}}, 0x90)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r4, 0x2008000)
sendfile(r0, r4, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:18:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:46 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:46 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x2, &(0x7f00000000c0)="0adc1f023c123f3188a070")
preadv(r0, &(0x7f0000000480), 0x19d, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x6, 0x1, 0x3017, 0x5, 0x0, 0x3, 0x2, 0x7}})
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x3, 0xc82})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1e, 0x7, 0x5, 0x1, 0x5, r0, 0x5}, 0x2c)
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000240)={0x8, 0x57be, 0x1, 0x0, 0x8, 0x100000001})

[  741.670585] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:46 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/148, 0x23}], 0x100000000000009e, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
preadv(r1, &(0x7f0000000480), 0x19d, 0x0)

22:18:46 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfeff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
r4 = getpid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000040)=r4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  741.887285] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:46 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  741.928602] print_req_error: 539 callbacks suppressed
[  741.928615] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  741.940347] buffer_io_error: 539 callbacks suppressed
[  741.940357] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.003928] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.010439] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xff0f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  742.094219] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.100740] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.189802] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.196328] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.204523] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  742.260425] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.266941] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.320019] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.326539] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.374215] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.380714] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.395241] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.401726] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.428820] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.435376] Buffer I/O error on dev loop0, logical block 0, async page read
[  742.452178] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  742.458655] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}], 0x24d, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_triestat\x00\x16\xa2\xa6}\x9aP\xe2\xc7\x86\xe65\x93\xdf\n\x17\xfc@\xbc}\xba%]\xd3\\\xc3\x98\x971V\xaa$j\x8b\xb5\x9a\xb5\x04\xb1u\x89\x04\xfe%\xcbm\xdf\xcd\xc6\x87)\x03\xce1k\x1a.\x90S\x9ek\x00\x1b|Lq\xb0\xc2\xc7\xb7J\xfbUf\x1a\xa5\\\xd8i`4\xb0\x00\x00\x00\x00\x00\"\xd4}_\xabEM\xa9\xa0\xc8\xa0#\xb1\x97*\xb3\xfa\x066\xb1x\xa4\x9fe\x8akc\x00\x04\xae?\x1bB|\x9eR\xbfl\xea\xf9\x84\xc4\xf4\xed\xc3p]\x04O\xef\xe6\xc3\xbd\xc8\x19\x10\xa5\xdb\xdcf\x1dj\xfc\x805\xf9Q\xacZ\x11\xc8\x96\x9e\x19\xcb\x88\x0e\xf8\xec\xf5j\xdd\x86\x80\xcc\x01\xfa\xabX\xa04l\xd1@\x90\xe8{\xc5\x1c\x17G0[\x8c\xf4\x96$>\x99\xa9,\xd1\xe9\x803}\xe7\xf6\xdc\xba\vN\x9c\rY\x93\xc6\xdb\x00\xbcV\xe8}z\x01B\xae\x01z\xa2\xbc\xb4*\xbca:\x0e\x1d\x99\x9bm\xf1\xa5\xcb\x99\xb9\xa2r\xff\xfc\x065R\xa8\x1c\x1f\xd0\xe3[\xab\xa4\xa1\x84\x8eo#\x95\x97\x1c\xbc\xc8\x98Y\x06(!ps\xadmD\xb3K\x98D\x13W\x03#\xadJyDa?=W]\x05\xfal\x8f\xa7\xf9_\xaaue\xe4\x05<\x9e\x9ed#\x10\xd2')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:47 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000240)=""/1, &(0x7f0000000280)=0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0045401, &(0x7f0000000100))
flistxattr(r1, &(0x7f0000000040)=""/144, 0x90)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x0, @raw_data="4fe9eab6b00147e99eb871f009c88386f36219e515a95ea6227d4266eb76383e31d5ba5c9eb660542d986acc4bb94f02ba8d118b77b5af1bd5b038d74c13701a9ffbb4cc7b52c5afc7f1c50700d34d729778e1f0eb83efcf9f0934b18f7b1c63b88c3267e7b7cd2935863800bb7a8987aae1c54adfd12f8b833142d827c00df7cb786332508f32409cffcb623a09e9792538ec1805d212cb6a043b6117d1af6d56ad3b5527acf8b5b69e3f3bb4f4d4d12c69777524f1ebd485ba333b959a3fa998f965ad5aeb8c85"})

22:18:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000240)=""/1, &(0x7f0000000280)=0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0045401, &(0x7f0000000100))
flistxattr(r1, &(0x7f0000000040)=""/144, 0x90)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x0, @raw_data="4fe9eab6b00147e99eb871f009c88386f36219e515a95ea6227d4266eb76383e31d5ba5c9eb660542d986acc4bb94f02ba8d118b77b5af1bd5b038d74c13701a9ffbb4cc7b52c5afc7f1c50700d34d729778e1f0eb83efcf9f0934b18f7b1c63b88c3267e7b7cd2935863800bb7a8987aae1c54adfd12f8b833142d827c00df7cb786332508f32409cffcb623a09e9792538ec1805d212cb6a043b6117d1af6d56ad3b5527acf8b5b69e3f3bb4f4d4d12c69777524f1ebd485ba333b959a3fa998f965ad5aeb8c85"})

22:18:47 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:47 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
getpid()
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfffe}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xac2, 0x0)

[  742.699470] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:47 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x34000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:47 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:47 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  742.889998] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  743.096185] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:48 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x54}], 0x3b6, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xf00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:48 executing program 4:
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:48 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ipv6_route\x00')
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2})
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0xaa, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000000f, 0x0)

22:18:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:48 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:48 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/40, 0x28}], 0x1000000000000268, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x2, 0x3, 0x3a, 0x3, 0x3})
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r3 = fcntl$getown(r1, 0x9)
fcntl$setown(r2, 0x8, r3)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={<r4=>0x0, 0x37969cfb, 0x30, 0x2, 0x100}, &(0x7f00000002c0)=0x18)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={r4, 0x6}, &(0x7f0000000340)=0x8)
setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x100000000, @empty, 0x700000000}, {0xa, 0x4e22, 0x7fffffff, @ipv4={[], [], @remote}, 0xb2a5}, 0x4, [0x10000, 0x0, 0x0, 0xffffffffffffff00, 0x9, 0x3, 0xfffffffffffffff7, 0x5]}, 0x5c)

22:18:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x1000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:48 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:48 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
prctl$PR_SET_ENDIAN(0x14, 0x2)

22:18:48 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x1030000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:48 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ipv6_route\x00')
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2})
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:48 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:49 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000001cf, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x2000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:49 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
prctl$PR_SET_ENDIAN(0x14, 0x2)

22:18:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:49 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:49 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8)
bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x3, r1, 0xa, r0}, 0x10)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0x1, 0x9, 0x2, 0x6, 0x7fffffff})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:49 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:49 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
prctl$PR_SET_ENDIAN(0x14, 0x2)

22:18:50 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ipv6_route\x00')
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2})
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:50 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:50 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x5000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:50 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:50 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:50 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:50 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  745.649490] validate_nla: 9 callbacks suppressed
[  745.649499] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast2}], 0x10)
close(r2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r3 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x0, &(0x7f0000000200))
msgget(0x1, 0x20b)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x3)
sendfile(r3, r4, &(0x7f0000000080)=0x80000, 0x100000001)
ioctl$sock_ifreq(r1, 0x4000000000089b1, &(0x7f0000000000)={'bondslav\xfe\xff\xff\xff\xff\xff\xff\xff', @ifru_data=0x0})
bind$netrom(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0)
socket$netlink(0x10, 0x3, 0xa)
ioctl(0xffffffffffffffff, 0x1000008912, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x503, 0x0)

22:18:51 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:51 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

[  746.338958] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:51 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  746.402545] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:51 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  746.678047] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10)
getpeername$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:51 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xa000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:51 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  747.058775] print_req_error: 661 callbacks suppressed
[  747.058786] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.070554] buffer_io_error: 661 callbacks suppressed
[  747.070567] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:52 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:52 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

[  747.100003] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  747.184736] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.191241] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:52 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xc000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  747.280807] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.287406] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:52 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  747.373486] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.380011] Buffer I/O error on dev loop0, logical block 0, async page read
[  747.387827] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.394323] Buffer I/O error on dev loop0, logical block 0, async page read
[  747.427826] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:52 executing program 3:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)

[  747.469185] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.475699] Buffer I/O error on dev loop0, logical block 0, async page read
[  747.558478] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.565012] Buffer I/O error on dev loop0, logical block 0, async page read
[  747.646245] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.652774] Buffer I/O error on dev loop0, logical block 0, async page read
[  747.754942] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.761436] Buffer I/O error on dev loop0, logical block 0, async page read
[  747.801755] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  747.808283] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xe000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:52 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:52 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:52 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2000, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5, 0x80000000, 0x3000000000, 0x100, 0x100000001})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x4a0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x969, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:52 executing program 3:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)

22:18:52 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  747.946340] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:52 executing program 3:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)

22:18:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:53 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:53 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  748.186420] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:53 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x10000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:53 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

[  748.416619] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:53 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:53 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r1=>0x0)
sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x10000000)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
r3 = getpgrp(r2)
r4 = syz_open_procfs(r3, &(0x7f00000000c0)='attr/keycreate\x00')
r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x801)
preadv(r4, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$KDDISABIO(r5, 0x4b37)
ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000100)=0x7fffffff)

22:18:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x20000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:53 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:53 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:53 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

[  748.749411] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:53 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:53 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:53 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:53 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:53 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:53 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200, 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f00000006c0)={0x7, 0x21, 0x1}, 0x7)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000005c0)={<r1=>0xffffffffffffffff}, 0x113, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r1, 0x5}}, 0x18)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f00000005c0), 0x0, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8100, 0x0)
r4 = geteuid()
timer_create(0x2, &(0x7f0000000840)={0x0, 0x3, 0x1, @thr={&(0x7f0000000700)="c80c1624e275e9f624b4f2257467c7d09264232938908eafc4c7c9ad5da340e6994adf1ca929d038dff6494fe6bdd206c7e7d43b0f7a66b3433da4680ef2420f594306569f2fa723ae9c7d7bd15e9b74e49d00cda9dcbf69a84ea3425ef6f2ec621d24f90e2bac92eede7377b48d7015d33e684136bdc850b2609f89ad679edbd86e0062f7bc929f7db48289bc2b2ea62084264ddd9c0e4454cfb9a44b2510eb2c61cae802c519892b2d5a6dd9d13abe043d1e2820bf34fe00ec07cfa4af34fc158601d22f3f28260c9134e4089838e5b3954960208913787f99b0bd45fdad71", &(0x7f0000000800)="152cacb9c7c92ea15dd29c2732cbe9a8275e841ad4eb9d5b67f9e32a37f850c4fe4dd1d575f6121d68c0936d110a976af2335f001254352128add3d1d94ddc"}}, &(0x7f0000000880)=<r5=>0x0)
timer_gettime(r5, &(0x7f00000008c0))
r6 = getgid()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getgid()
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)={0x170, 0x0, 0x6, [{{0x2, 0x1, 0x2, 0x3, 0x7, 0x101, {0x1, 0x8, 0x1e67, 0x7, 0x6, 0x7, 0x7fff, 0x8, 0x7fffffff, 0x9, 0x80000000, r4, r6, 0x7fffffff, 0xcd0a}}, {0x1, 0x7, 0x11, 0xfffffffffffffffc, 'net/fib_triestat\x00'}}, {{0x3, 0x1, 0x1, 0xfffffffffffffffc, 0xffffffff, 0x1, {0x6, 0x5f02b5d5, 0x6, 0x6, 0x7, 0x100000000, 0x5, 0xffffffff, 0x5, 0x8, 0x3, r7, r8, 0x0, 0x4}}, {0x5, 0x8492, 0x11, 0x7, 'net/fib_triestat\x00'}}]}, 0x170)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_t\x00\x00\x00\x00\x00\x00\x00\x00')
preadv(r9, &(0x7f0000000480), 0x20000000000000fc, 0x0)
recvfrom$x25(r9, &(0x7f00000003c0)=""/234, 0xea, 0x40, &(0x7f00000004c0)={0x9, @null='               \x00'}, 0x12)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000680)={'eql\x00', {0x2, 0x4e22, @multicast2}})

22:18:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x40000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:54 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:54 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80)
write$smack_current(r0, &(0x7f0000000040)='\x00', 0x1)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:54 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:18:54 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x48000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:54 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:54 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:18:54 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:54 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:54 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0)

22:18:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:54 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:18:54 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x200000000000030c, 0x0)
ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0e0000000000000200000000000000ff000000000000000400000000000000f4000000000000000723043c000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000f500000000000000f9ffffffffffffff40fa02080000000000000000000000000000f500000000000000a63bf24999b553e457480000000000000000000000000000"])
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={<r3=>r1, r0, 0x0, 0x11, &(0x7f0000000040)='net/fib_triestat\x00', r2}, 0x30)
ioprio_set$pid(0x3, r3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x3010, r0, 0x180000000)
fsync(r0)

22:18:55 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4000, 0x0)

22:18:55 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x60000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:55 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4000, 0x0)

22:18:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x10001, 0x1ff})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:55 executing program 1:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x65580000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:55 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x4000, 0x0)

22:18:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:55 executing program 1:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:55 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)

22:18:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:18:55 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x68000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:55 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)

[  750.841319] validate_nla: 7 callbacks suppressed
[  750.841328] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2d0081, 0x0)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)=<r1=>0x0)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=r1)

22:18:56 executing program 1:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)

22:18:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6c000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:56 executing program 4:
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)

22:18:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x74000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  751.308755] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  751.329130] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:56 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x200000000000030c, 0x0)
ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0e0000000000000200000000000000ff000000000000000400000000000000f4000000000000000723043c000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000f500000000000000f9ffffffffffffff40fa02080000000000000000000000000000f500000000000000a63bf24999b553e457480000000000000000000000000000"])
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)={0x0, <r2=>0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={<r3=>r1, r0, 0x0, 0x11, &(0x7f0000000040)='net/fib_triestat\x00', r2}, 0x30)
ioprio_set$pid(0x3, r3, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x3010, r0, 0x180000000)
fsync(r0)

22:18:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  751.479542] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)

22:18:56 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1ff, &(0x7f0000000040)=0x4)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7a000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:57 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)

[  752.584094] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:57 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)

22:18:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x81000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  752.773857] print_req_error: 905 callbacks suppressed
[  752.773869] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  752.785609] buffer_io_error: 905 callbacks suppressed
[  752.785619] Buffer I/O error on dev loop0, logical block 0, async page read
[  752.887205] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  752.893673] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:57 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  752.947240] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  752.953743] Buffer I/O error on dev loop0, logical block 0, async page read
[  753.051799] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  753.058313] Buffer I/O error on dev loop0, logical block 0, async page read
[  753.130572] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  753.137093] Buffer I/O error on dev loop0, logical block 0, async page read
[  753.185151] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  753.191662] Buffer I/O error on dev loop0, logical block 0, async page read
[  753.245784] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  753.252282] Buffer I/O error on dev loop0, logical block 0, async page read
[  753.298968] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  753.305479] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x4a002)
syz_open_pts(r0, 0x2)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  753.350315] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  753.356843] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  753.439583] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  753.451959] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  753.458456] Buffer I/O error on dev loop0, logical block 0, async page read
22:18:58 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x9effffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  753.827754] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xb2080000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:58 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  754.174826] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffc01, 0x40}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/f\xe2Z?\xbb\xda\xe6\xd1\x18\xdd7\x04\xc7')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:59 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  754.388131] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:59 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/178)
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl(r0, 0x0, &(0x7f0000000000))
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x12040)

22:18:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:59 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  754.701658] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:18:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:18:59 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:18:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:18:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffa888}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:00 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, 0x0, 0x0, 0x0)

22:19:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:00 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, 0x0, 0x0, 0x0)

22:19:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:00 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={<r2=>0x0, 0x10001, 0x1, [0x6610]}, &(0x7f0000000080)=0xa)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x2, @ipv4={[], [], @loopback}, 0x3}}, 0x34, 0x5}, 0x90)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:00 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:00 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, 0x0, 0x0, 0x0)

22:19:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  755.944261] validate_nla: 4 callbacks suppressed
[  755.944271] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:00 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:00 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:00 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  756.139369] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
22:19:01 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x200)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10)
r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r3)
keyctl$unlink(0x9, r3, r3)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000200))
stat(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8)
lstat(&(0x7f0000000640)='./bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_rdma(&(0x7f0000000380)='127.0.0.1\x00', &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='9p\x00', 0x80000, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,version=9p2000.u,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',rq=0x0000000000000007,rq=0x0000000000000048,rq=0x0000000000000005,sq=0x0000000080000000,timeout=0x0000000000000001,timeout=0xfffffffffffffffa,aname=@em1vmnet1,uid=', @ANYRESDEC=r6, @ANYBLOB="2c686173682c6d61726b3d4d41591f455845432c6d6561737572652c666f776e65723e", @ANYRESDEC=r7, @ANYBLOB=',\x00'])
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0xfff, 0x9, 0x5})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x50, &(0x7f00000000c0)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r8, 0x4)
openat$vfio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vfio/vfio\x00', 0x10400, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000180)=0x7)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xc6e, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]})

[  756.308416] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x10000]}, &(0x7f0000000040)=0x6)

22:19:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:01 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:01 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0xb2080000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  756.662746] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:01 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  756.734206] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
22:19:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:01 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x40030000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  756.955897] netlink: 'syz-executor.1': attribute type 15 has an invalid length.
[  757.030810] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x1ff, 0x200800)
ioctl$TIOCCONS(r0, 0x541d)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x3ff, 0x0, 0x3011, 0x5, 0xf, 0xb, 0x3, 0x7}})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={<r2=>0x0, 0x4}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0x3ff, 0xe2c}, &(0x7f0000000240)=0x10)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000980)=[{&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/124, 0xffffffff7fffffff}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000640)=""/93, 0x5d}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/80, 0x50}], 0x9, 0x0)
write$P9_RFSYNC(r3, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7)

22:19:02 executing program 4:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x106, 0x100a}}, 0x20)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r8=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r7, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r8}}, 0x10)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r10=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000800)={r10, 0x1}, 0x8)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
sendfile(r5, r5, 0x0, 0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000480)={0x1, 0x400, 0x1, 0x1})
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="210025bd704cfddb25030000000c00050063052364976e89cc6de005af24010500000000003ebbb9e1f8ed3d5c502ace10e312a3d0015968078bf64065bcce1ef9fda19f706eca967b817a3c8855a18d33f60cb301f995dec4564ffa037141bb63d93d888a2b14bb96885bde4b943c4c93213f70370460d0908342dbddd49be23e0643d71d7ed6c6c2eb5ff5732ad1914892525102e7e4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20044040)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000ec0)={0x13, 0xfeeb, 0xfa00, {&(0x7f0000000c80), r6}}, 0x1c0c92704baa55e7)

22:19:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf0ffffffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:02 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  757.322214] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000000), 0x0, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x1)

[  757.462277] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x106, 0x100a}}, 0x20)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r8=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r7, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r8}}, 0x10)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r10=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000800)={r10, 0x1}, 0x8)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
sendfile(r5, r5, 0x0, 0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000480)={0x1, 0x400, 0x1, 0x1})
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="210025bd704cfddb25030000000c00050063052364976e89cc6de005af24010500000000003ebbb9e1f8ed3d5c502ace10e312a3d0015968078bf64065bcce1ef9fda19f706eca967b817a3c8855a18d33f60cb301f995dec4564ffa037141bb63d93d888a2b14bb96885bde4b943c4c93213f70370460d0908342dbddd49be23e0643d71d7ed6c6c2eb5ff5732ad1914892525102e7e4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20044040)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000ec0)={0x13, 0xfeeb, 0xfa00, {&(0x7f0000000c80), r6}}, 0x1c0c92704baa55e7)

22:19:02 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x103000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:02 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000000)={0x1, {}, 0x4156, 0xff})
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x4e23, @loopback}})
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:02 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x200000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:02 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:02 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x106, 0x100a}}, 0x20)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r8=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r7, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r8}}, 0x10)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r10=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000800)={r10, 0x1}, 0x8)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
sendfile(r5, r5, 0x0, 0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000480)={0x1, 0x400, 0x1, 0x1})
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="210025bd704cfddb25030000000c00050063052364976e89cc6de005af24010500000000003ebbb9e1f8ed3d5c502ace10e312a3d0015968078bf64065bcce1ef9fda19f706eca967b817a3c8855a18d33f60cb301f995dec4564ffa037141bb63d93d888a2b14bb96885bde4b943c4c93213f70370460d0908342dbddd49be23e0643d71d7ed6c6c2eb5ff5732ad1914892525102e7e4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20044040)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000ec0)={0x13, 0xfeeb, 0xfa00, {&(0x7f0000000c80), r6}}, 0x1c0c92704baa55e7)

[  757.911159] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  757.955308] print_req_error: 966 callbacks suppressed
[  757.955319] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  757.967091] buffer_io_error: 966 callbacks suppressed
[  757.967100] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:02 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  758.014651] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  758.021206] Buffer I/O error on dev loop0, logical block 0, async page read
[  758.035976] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  758.042472] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x300000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  758.079203] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  758.085854] Buffer I/O error on dev loop0, logical block 0, async page read
[  758.115915] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  758.122448] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  758.160179] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  758.166734] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:03 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  758.208553] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  758.215095] Buffer I/O error on dev loop0, logical block 0, async page read
[  758.248355] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:19:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  758.254869] Buffer I/O error on dev loop0, logical block 0, async page read
[  758.297255] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  758.303786] Buffer I/O error on dev loop0, logical block 0, async page read
[  758.334613] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:19:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000340), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={<r1=>0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f00000000c0)=0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0xf3, "e20d98b53d6ac3798b45715f03d8220aca616b54a239dd69f9af65ed1853e043c28480dd7a8a2da3092784edc4abb6f7399f10a4ba2cca32b9515b4459f20f83c44e1b0b016ec09ef8b627d334927348c105a40870d25a5363c14734465fefe2bee60aaddb6ccd06fad61c8001f2cc860e404d349cfebbfddbd89884f0bbb949d8bb2414df13d5f287ae995d1174039bb5748389b60f79fb4144697134b06c30f3a8e50e9d0286e3e0e889bded0de3abed8de567c84db3f0c57fd69a4b09594de3b0ae7065869c8cb7b8472ee694c02c9831d0da386b31de92439e1a3619dbb73a4d01e82e307f5d96786acfc7d9b96e3755af"}, &(0x7f0000000100)=0xfb)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x10000, 0x6, 0xef7}]})

[  758.341188] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:03 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x500000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r9=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000800)={r9, 0x1}, 0x8)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
sendfile(r5, r5, 0x0, 0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000480)={0x1, 0x400, 0x1, 0x1})
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="210025bd704cfddb25030000000c00050063052364976e89cc6de005af24010500000000003ebbb9e1f8ed3d5c502ace10e312a3d0015968078bf64065bcce1ef9fda19f706eca967b817a3c8855a18d33f60cb301f995dec4564ffa037141bb63d93d888a2b14bb96885bde4b943c4c93213f70370460d0908342dbddd49be23e0643d71d7ed6c6c2eb5ff5732ad1914892525102e7e4"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20044040)

22:19:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:03 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={<r1=>0x0, 0x6, 0x30, 0x7, 0x6}, &(0x7f0000000280)=0x18)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=<r2=>r1, @ANYBLOB="00000000cc5b73d05b96dde1552210a819582a8efdeea7060be5de307422c41bb0073c158ff1f757fee8d3048d6bc3420f9e6a2b8f8e3edd4b3478b619a30c14101f8dd39c215d079a8b9687abfbaef0049a6f02189b3b93b9da2408865576f237b73aa9338f78d801c9c94241c618e86f0e07947f0829b242790223fa8896d3d2"], &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="903924f93c2c515e824260c46f79a48e870806a7756680f991d1887f2b49ad745b4e467573084cdd0895e00542c1f15fdf120330a0d7e11d7004f5ba3adc60a1ccd6bd41cfa565c78dd294b841c2ea708032d5bb1edf7184762ef6d2c11f8a75cfb1397032a5b44ea590bd9c8c2f9add0fd09ebfc9ed7aa545ef070a4242a7fdbab9c0c3b1ce307a835c0be3da5122a60de7e56933dc2aa8bebf689745c4f242b0258ef0"], &(0x7f0000000100)=0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x600000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r9=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000800)={r9, 0x1}, 0x8)
syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
sendfile(r5, r5, 0x0, 0x3)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000480)={0x1, 0x400, 0x1, 0x1})

[  758.731579] Bluetooth: hci0: Frame reassembly failed (-84)
22:19:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x700000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:03 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:03 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x206180, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x3e1040, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0)
bind$ax25(r0, &(0x7f00000000c0)={{0x3, @null, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48)
preadv(r1, &(0x7f0000000000), 0x1250, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="fb562b0d000000000000a04df82728e57c8cedb20600000000ae6cb3e3a7e5fe51b1f7a256f046ee30f572a4dde8c9c8e3000015869cd7017dca0000"])

[  760.785575] Bluetooth: hci0: command 0x1003 tx timeout
[  760.790973] Bluetooth: hci0: sending frame failed (-49)
[  762.865666] Bluetooth: hci0: command 0x1001 tx timeout
[  762.871068] Bluetooth: hci0: sending frame failed (-49)
[  764.945642] Bluetooth: hci0: command 0x1009 tx timeout
22:19:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r9=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000800)={r9, 0x1}, 0x8)
syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
sendfile(r5, r5, 0x0, 0x3)

22:19:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xa00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:14 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$setperm(0x5, r1, 0x8)
syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x10001, 0x682040)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:14 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmsg(0xffffffffffffff9c, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/7, 0x7}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xc00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  769.274106] validate_nla: 6 callbacks suppressed
[  769.274127] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  769.277425] print_req_error: 112 callbacks suppressed
[  769.277435] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.298151] buffer_io_error: 112 callbacks suppressed
[  769.298161] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:14 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  769.411258] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.413881] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  769.417778] Buffer I/O error on dev loop0, logical block 0, async page read
[  769.455673] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.462229] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:14 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  769.508984] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.515612] Buffer I/O error on dev loop0, logical block 0, async page read
[  769.544807] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.551338] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xe00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  769.626049] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.632592] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:14 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, 0x0, 0x0, 0x0)

[  769.686193] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.692704] Buffer I/O error on dev loop0, logical block 0, async page read
[  769.694792] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  769.741483] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.747987] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  769.797189] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.803693] Buffer I/O error on dev loop0, logical block 0, async page read
[  769.856988] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  769.863490] Buffer I/O error on dev loop0, logical block 0, async page read
[  769.896991] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:14 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r9=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000800)={r9, 0x1}, 0x8)
syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')

22:19:14 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, 0x0, 0x0, 0x0)

22:19:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x1000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  770.142675] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x4, 0x8)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000780)={'TPROXY\x00'}, &(0x7f00000007c0)=0x1e)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000600)='security.SMACK64\x00', &(0x7f0000000740)='net/fib_triestat\x00', 0x11, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000800))
preadv(r1, &(0x7f0000000640)=[{}, {&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/233, 0xfffffdbc}, {&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000480)=""/152, 0x98}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/35, 0x23}], 0xa, 0x0)

22:19:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:15 executing program 4:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, 0x0, 0x0, 0x0)

[  771.665494] Bluetooth: hci0: command 0x1003 tx timeout
[  771.670922] Bluetooth: hci0: sending frame failed (-49)
[  773.745534] Bluetooth: hci0: command 0x1001 tx timeout
[  773.750944] Bluetooth: hci0: sending frame failed (-49)
[  775.825570] Bluetooth: hci0: command 0x1009 tx timeout
22:19:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:19:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x2000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:24 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=<r9=>0x0, &(0x7f00000007c0)=0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000800)={r9, 0x1}, 0x8)

22:19:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$setperm(0x5, r1, 0x8)
syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x10001, 0x682040)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:24 executing program 2:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x80000, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

[  780.123110] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x3f00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  780.168947] print_req_error: 51 callbacks suppressed
[  780.168959] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.180627] buffer_io_error: 51 callbacks suppressed
[  780.180640] Buffer I/O error on dev loop0, logical block 0, async page read
[  780.228730] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  780.235461] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.242687] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  780.270567] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.277097] Buffer I/O error on dev loop0, logical block 0, async page read
[  780.289491] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.295981] Buffer I/O error on dev loop0, logical block 0, async page read
[  780.306103] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.312587] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:25 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

[  780.353715] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.360259] Buffer I/O error on dev loop0, logical block 0, async page read
[  780.367598] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0xef, 0x101, 0x1000})

[  780.409904] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.416444] Buffer I/O error on dev loop0, logical block 0, async page read
[  780.431415] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.437921] Buffer I/O error on dev loop0, logical block 0, async page read
[  780.453571] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:19:25 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:19:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  780.460182] Buffer I/O error on dev loop0, logical block 0, async page read
[  780.491607] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  780.498150] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:25 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:19:25 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000780), &(0x7f00000007c0)=0x4)

22:19:25 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xa, &(0x7f0000000300)=@raw=[@ldst={0x2, 0x3, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, @exit, @exit, @map={0x18, 0x3}, @map={0x18, 0x8, 0x1, 0x0, 0xffffffffffffff9c}, @exit], &(0x7f0000000380)='GPL\x00', 0x4, 0x8a, &(0x7f00000003c0)=""/138, 0x41100, 0x1, [], 0x0, 0x1}, 0x48)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000500)='/dev/amidi#\x00', 0x8e, 0x1fff)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix={0xffffffff7fffffff, 0x6706, 0x41414270, 0x9, 0x2, 0xffffffff, 0xf, 0x5, 0x1, 0x7, 0x1, 0x3}})
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  780.552192] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8a440, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={<r1=>0x0, 0xb5, "9960605992ad49cdfa0dfcbf405fcb9962bdff21de00e2ace3a88433d17f2a8e0857dffd5dbcf6580dc4dc599542d5217dbfc1b6b9fb94fc1d4c9e063c4cd061a78ed4b8643100036d162ee38e0fa434c7f1603c94bd9945ab2c5c23decf79dff26da63d20d775ea8bbef6e142bd0c2241312db5f9d349a9763ff3e43db83cd3f5040c6ee2d942a74d406721857662a6201cad582ad1dc72a873954bc4386338ab0a3970e74019d2e69509ef40d78409185be6846f"}, &(0x7f0000000100)=0xbd)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r1, 0xffff}, &(0x7f0000000280)=0x8)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:25 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:19:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4a00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  780.748967] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:25 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x100, 0x0)

22:19:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x4c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:25 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

[  780.909469] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6000000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:26 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28, <r7=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r6, 0x10, &(0x7f0000000700)={&(0x7f0000000580)=""/183, 0xb7, r7}}, 0x10)

[  781.125294] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:26 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt(r2, 0x1, 0x1, &(0x7f00000000c0)=""/169, &(0x7f0000000180)=0xa9)
close(r0)
ftruncate(r2, 0x2008000)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000000)={0x0, 0x100, {0x52, 0x4, 0x34a, {0x4, 0x3}, {0x2, 0x80000001}, @ramp={0x4ef8, 0x536, {0x1, 0xdf2, 0x8, 0x2}}}, {0x53, 0x3, 0x6, {0x5e2d, 0x95}, {0x4, 0x9}, @const={0x4, {0x4, 0xffffffff, 0x4, 0xca3}}}})
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6558000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:26 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

22:19:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:26 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=""/40, 0x28}}, 0x10)

22:19:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
sendto$llc(r0, &(0x7f0000000000)="cbf4f2a7b5c4e01c4300017d3679e837e1add637ebd3c63027acf1e387cbd9546425ce7e8d6a034afb368dd3d70d24b16eff03fd438e78f26017366f20c64a88f8488922f68dbc5fd2f3099b0dffec3b652c2f4b919f7578568b616271244d2ed1d70faf3724eff21ca8145ef4cbdbb65a621ba6f9f2c8", 0x77, 0x80, &(0x7f0000000080)={0x1a, 0x30e, 0x7fffffff, 0x61d273ab, 0x6, 0xbc75, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)

[  781.524802] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6800000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:26 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

22:19:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:26 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)
openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x418800, 0x0)

[  781.691604] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x6c00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:26 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt(r2, 0x1, 0x1, &(0x7f00000000c0)=""/169, &(0x7f0000000180)=0xa9)
close(r0)
ftruncate(r2, 0x2008000)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000000)={0x0, 0x100, {0x52, 0x4, 0x34a, {0x4, 0x3}, {0x2, 0x80000001}, @ramp={0x4ef8, 0x536, {0x1, 0xdf2, 0x8, 0x2}}}, {0x53, 0x3, 0x6, {0x5e2d, 0x95}, {0x4, 0x9}, @const={0x4, {0x4, 0xffffffff, 0x4, 0xca3}}}})
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:26 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x100a}}, 0x20)

22:19:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  781.944162] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:26 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

22:19:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7400000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:27 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt(r2, 0x1, 0x1, &(0x7f00000000c0)=""/169, &(0x7f0000000180)=0xa9)
close(r0)
ftruncate(r2, 0x2008000)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000000)={0x0, 0x100, {0x52, 0x4, 0x34a, {0x4, 0x3}, {0x2, 0x80000001}, @ramp={0x4ef8, 0x536, {0x1, 0xdf2, 0x8, 0x2}}}, {0x53, 0x3, 0x6, {0x5e2d, 0x95}, {0x4, 0x9}, @const={0x4, {0x4, 0xffffffff, 0x4, 0xca3}}}})
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:27 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000880))

22:19:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x7a00000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x0, 0xff, 0x1})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x3cd, 0x1000, 0x0, 0x0, 0xb52c})
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2)

22:19:27 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
ioctl$RTC_VL_CLR(r1, 0x7014)

22:19:27 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f00000003c0)='./bus\x00', 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
ftruncate(r2, 0x208200)
r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x5062, 0x4)
socket$rds(0x15, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
sendfile(r0, r1, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)

22:19:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x8100000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.current\x00', 0x0, 0x0)

22:19:27 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x88a8ffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:27 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:27 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x9effffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xb208000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:28 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:28 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
ioctl$RTC_VL_CLR(r1, 0x7014)

22:19:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
clone(0x1a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x4a, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
write$binfmt_aout(r1, 0x0, 0x0)

22:19:28 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00)={<r3=>0xffffffffffffffff}, 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r4=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)
write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000b80)={0x13, 0x10, 0xfa00, {&(0x7f0000000900), r3, 0x1}}, 0x18)

22:19:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xf0ffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:28 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:28 executing program 0:
getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x0)
mmap$binder(&(0x7f000003e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="68bd0000d7ebd3")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

22:19:28 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x0, 0x0)

22:19:28 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000001040))

22:19:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfeff000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind(r0, &(0x7f0000000000)=@sco={0x1f, {0x6419, 0xc4, 0x400, 0x7fff, 0xffffffffffffffff, 0x2}}, 0x80)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00), 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={<r3=>0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r3, 0x6}, &(0x7f0000000280)=0x8)

22:19:29 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.nlink\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000)

22:19:29 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xff0f000000000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffff7f00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00), 0x13f, 0xe}}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc)

22:19:29 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:29 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0\x00')

22:19:29 executing program 4:
socket$inet6(0xa, 0x0, 0x800)
r0 = socket$inet(0x2b, 0x1, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x2)
setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0)

22:19:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xffffffff00000000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:29 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b00), 0x13f, 0xe}}, 0x20)

[  785.087492] tls_set_device_offload_rx: netdev lo with no TLS offload
22:19:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0xfffffffffffff000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0xfffffffffffffe6a}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000080)=0xc)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='fd/3\x00')
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7, 0x8000}, 0x4)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000240))
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:30 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x200000000000014c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x7f, @multicast2, 0x4e23, 0x2, 'dh\x00', 0x26, 0x4, 0x18}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0x2001, 0x20, 0x4, 0x1ff}}, 0x44)

22:19:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/rtc0\x00', 0x40, 0x0)

[  785.229172] print_req_error: 539 callbacks suppressed
[  785.229184] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.240937] buffer_io_error: 539 callbacks suppressed
[  785.240946] Buffer I/O error on dev loop0, logical block 0, async page read
[  785.266924] validate_nla: 11 callbacks suppressed
[  785.266934] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  785.302070] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.308593] Buffer I/O error on dev loop0, logical block 0, async page read
[  785.335781] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.342278] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:30 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400200, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x2, 0x2, 0x5, 0x7f, 0x6, 0x4, 0x2f, 0x8, 0xfffffffffffffff9, 0x401, 0xfff, 0x9, 0x5}, {0x4, 0x80, 0x81, 0x9, 0x54, 0x100, 0xfffffffffffffff7, 0x640, 0x7, 0x7, 0x400, 0x3, 0x7}, {0x6, 0x6, 0x27, 0x7fffffff, 0x7, 0x2, 0x1, 0x7, 0x2, 0x4, 0x100000000, 0x1, 0xdd}], 0x1ff})
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
preadv(r2, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000100)=0x3)

22:19:30 executing program 4:
socket$inet6(0xa, 0x0, 0x800)
r0 = socket$inet(0x2b, 0x1, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x2)
setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0)

22:19:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  785.361603] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.368143] Buffer I/O error on dev loop0, logical block 0, async page read
[  785.397980] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.404439] Buffer I/O error on dev loop0, logical block 0, async page read
[  785.455600] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  785.461052] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.469601] Buffer I/O error on dev loop0, logical block 0, async page read
[  785.495185] print_req_error: I/O error, dev loop0, sector 0 flags 0
22:19:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000))

[  785.501720] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  785.526265] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.532757] Buffer I/O error on dev loop0, logical block 0, async page read
[  785.549247] tls_set_device_offload_rx: netdev lo with no TLS offload
[  785.573626] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  785.586154] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.592634] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:30 executing program 0:

22:19:30 executing program 4:

[  785.641937] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  785.648444] Buffer I/O error on dev loop0, logical block 0, async page read
22:19:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:30 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:30 executing program 0:

22:19:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

22:19:30 executing program 4:

22:19:30 executing program 0:

[  785.933936] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:30 executing program 4:

22:19:30 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/43)

22:19:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2)
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x0)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x36, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=<r1=>0x0)
clock_gettime(0xfffffffffffbfffc, &(0x7f00000002c0)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f0000000240)={{r2, r3+30000000}, {0x0, 0x1c9c380}}, &(0x7f0000000280))

22:19:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:31 executing program 0:

22:19:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:31 executing program 4:

22:19:31 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:19:31 executing program 4:

[  786.431020] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:31 executing program 0:

22:19:31 executing program 1:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:19:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:31 executing program 4:

[  786.658863] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:31 executing program 2:

22:19:31 executing program 0:

22:19:31 executing program 4:

22:19:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:31 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:19:32 executing program 4:

22:19:32 executing program 0:

22:19:32 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, 0x0)

[  787.142779] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:32 executing program 0:

22:19:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:32 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x8000000003, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100))

22:19:32 executing program 4:

22:19:32 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, 0x0)

22:19:32 executing program 0:

22:19:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  787.433564] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:32 executing program 4:

22:19:32 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, 0x0)

22:19:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:32 executing program 0:

22:19:32 executing program 2:

22:19:32 executing program 4:

22:19:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:32 executing program 1:

22:19:32 executing program 0:

[  787.758248] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:32 executing program 4:

22:19:32 executing program 2:

22:19:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:32 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:32 executing program 1:

22:19:32 executing program 0:

22:19:32 executing program 2:

22:19:32 executing program 4:

[  788.040651] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:33 executing program 1:

22:19:33 executing program 2:

22:19:33 executing program 0:

22:19:33 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
clone(0x1a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
write$smack_current(r1, 0x0, 0x0)

22:19:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:33 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'eql\x00', 0x1303})
ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
dup2(r0, r2)

22:19:33 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mlockall(0x3)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

22:19:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:33 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
clone(0x1a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0)

22:19:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0xfffffffffffffe6a}], 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000080)=0xc)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='fd/3\x00')
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7, 0x8000}, 0x4)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000240))
preadv(r1, &(0x7f0000000480), 0x20000000000000fc, 0x0)

22:19:33 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:33 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffeffff)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x4400)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000240)=""/156, &(0x7f0000000300)=0x9c)
r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x5}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = dup3(r3, r1, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x2)
open(0x0, 0x14103e, 0x27)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000002080)=""/4096)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
getpgrp(0xffffffffffffffff)
ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f00000001c0)=0x1)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)={0x0, <r7=>0x0, 0xfffffffffffffff7})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={r7})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
clone(0x2004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000080)={&(0x7f0000630000/0x4000)=nil, 0x100000000000004, 0x6, 0x0, &(0x7f00002ef000/0x2000)=nil})
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000))
r8 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x2cc000)
ioctl$LOOP_CLR_FD(r8, 0x4c01)

22:19:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x4000000000000)

22:19:34 executing program 2:
r0 = socket$inet6(0xa, 0x7, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x1ffe)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
ftruncate(r2, 0x2008000)
sendfile(r0, r0, 0x0, 0x7)
bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0x7, 0x0, 0x6, 0x7d68301d}, 0x6)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:34 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x802, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fa, 0x0)

22:19:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x68)

22:19:34 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x600000, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7fffffff)
r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x800)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4)
keyctl$revoke(0x3, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/89, 0x59}], 0x8, 0x0)

22:19:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:34 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x4a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  789.966030] device team0 entered promiscuous mode
22:19:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fc, 0x68)

22:19:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:34 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  789.986970] device team_slave_0 entered promiscuous mode
[  790.028063] device team_slave_1 entered promiscuous mode
22:19:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8100, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000fa, 0x0)

[  790.964674] print_req_error: 1088 callbacks suppressed
[  790.964685] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  790.976509] buffer_io_error: 1088 callbacks suppressed
[  790.976518] Buffer I/O error on dev loop0, logical block 0, async page read
[  790.994925] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.001408] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.009108] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.015592] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.030777] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.037441] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.044966] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.051454] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.060527] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.067003] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.080727] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.087226] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.096256] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.102711] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.116360] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.122823] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.133104] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  791.139589] Buffer I/O error on dev loop0, logical block 0, async page read
[  791.294881] validate_nla: 7 callbacks suppressed
[  791.294893] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  791.315255] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
22:19:36 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x802, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
openat$vsock(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:36 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:36 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000f)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:36 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:36 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x8100, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  791.497437] netlink: 'syz-executor.2': attribute type 15 has an invalid length.
[  791.549137] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:36 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000e)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

[  791.631818] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  791.843673] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:36 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  792.024748] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:37 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  792.195808] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:37 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000e)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:37 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)

22:19:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000480), 0x20000000000000cd, 0x0)

[  793.665516] Bluetooth: hci0: command 0x1003 tx timeout
[  793.670913] Bluetooth: hci0: sending frame failed (-49)
[  795.745529] Bluetooth: hci0: command 0x1001 tx timeout
[  795.750923] Bluetooth: hci0: sending frame failed (-49)
[  797.825533] Bluetooth: hci0: command 0x1009 tx timeout
22:19:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:19:46 executing program 1 (fault-call:0 fault-nth:0):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:19:46 executing program 2 (fault-call:5 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:46 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

[  801.891027] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  801.909023] FAULT_INJECTION: forcing a failure.
[  801.909023] name failslab, interval 1, probability 0, space 0, times 0
22:19:46 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  801.942081] CPU: 1 PID: 4316 Comm: syz-executor.1 Not tainted 5.0.0-rc7 #77
[  801.949232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  801.949309] Call Trace:
[  801.949337]  dump_stack+0x172/0x1f0
[  801.965047]  should_fail.cold+0xa/0x1b
[  801.968948]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  801.968966]  ? lock_downgrade+0x810/0x810
[  801.968985]  ? ___might_sleep+0x163/0x280
[  801.969010]  __should_failslab+0x121/0x190
[  801.982377]  should_failslab+0x9/0x14
[  801.990405]  kmem_cache_alloc+0x2be/0x710
[  801.994569]  ? __might_sleep+0x95/0x190
[  801.994592]  __anon_vma_prepare+0x62/0x3c0
[  801.994613]  do_huge_pmd_anonymous_page+0xf8c/0x1550
[  802.007899]  ? __lock_acquire+0x53b/0x4700
[  802.012154]  ? __thp_get_unmapped_area+0x190/0x190
[  802.017084]  ? pmd_val+0x100/0x100
[  802.020636]  __handle_mm_fault+0x2daf/0x3f20
[  802.025053]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  802.029902]  ? find_held_lock+0x35/0x130
[  802.033965]  ? handle_mm_fault+0x322/0xb30
[  802.038216]  ? kasan_check_read+0x11/0x20
[  802.042376]  handle_mm_fault+0x43f/0xb30
[  802.046451]  __do_page_fault+0x5da/0xd60
[  802.050527]  do_page_fault+0x71/0x581
[  802.054340]  page_fault+0x1e/0x30
[  802.057800] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  802.063423] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  802.082337] RSP: 0018:ffff888056b7fcc8 EFLAGS: 00010206
[  802.087705] RAX: ffffed100ad6ffb0 RBX: 0000000000000030 RCX: 0000000000000006
[  802.094976] RDX: 0000000000000000 RSI: ffff888056b7fd50 RDI: 0000000020000000
[  802.102252] RBP: ffff888056b7fd00 R08: 0000000000000000 R09: ffffed100ad6ffb0
[  802.109523] R10: ffffed100ad6ffaf R11: ffff888056b7fd7f R12: 0000000020000000
[  802.116793] R13: ffff888056b7fd50 R14: 0000000020000030 R15: 00007ffffffff000
[  802.124101]  ? _copy_to_user+0xf7/0x120
[  802.128175]  ksys_shmctl+0x313/0x3b0
[  802.131905]  ? __ia32_sys_shmget+0x1d0/0x1d0
[  802.136323]  ? kasan_check_write+0x14/0x20
[  802.140567]  ? wait_for_completion+0x440/0x440
[  802.145165]  ? __sb_end_write+0xd9/0x110
[  802.149497]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  802.155034]  ? fput+0x128/0x1a0
[  802.158317]  ? ksys_write+0x166/0x1f0
[  802.162141]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  802.166904]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  802.172099]  ? do_syscall_64+0x26/0x610
[  802.176083]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  802.181449]  ? do_syscall_64+0x26/0x610
[  802.185434]  __x64_sys_shmctl+0x73/0xb0
[  802.189419]  do_syscall_64+0x103/0x610
[  802.193315]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  802.198503] RIP: 0033:0x457e29
[  802.201695] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  802.220602] RSP: 002b:00007f32e37dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  802.228312] RAX: ffffffffffffffda RBX: 00007f32e37dac90 RCX: 0000000000457e29
[  802.235600] RDX: 0000000020000000 RSI: 000000000000000e RDI: 0000000000000000
[  802.242871] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  802.250149] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32e37db6d4
[  802.257419] R13: 00000000004c6060 R14: 00000000004db158 R15: 0000000000000003
22:19:47 executing program 1 (fault-call:0 fault-nth:1):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:19:47 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  802.299274] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:19:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  802.357239] FAULT_INJECTION: forcing a failure.
[  802.357239] name failslab, interval 1, probability 0, space 0, times 0
[  802.412475] CPU: 1 PID: 4317 Comm: syz-executor.2 Not tainted 5.0.0-rc7 #77
[  802.419620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  802.428977] Call Trace:
[  802.431587]  dump_stack+0x172/0x1f0
[  802.435237]  should_fail.cold+0xa/0x1b
[  802.439151]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  802.444279]  ? lock_downgrade+0x810/0x810
[  802.448446]  ? ___might_sleep+0x163/0x280
[  802.452612]  __should_failslab+0x121/0x190
[  802.456866]  should_failslab+0x9/0x14
[  802.460679]  kmem_cache_alloc_node_trace+0x270/0x720
[  802.465804]  ? mark_held_locks+0x100/0x100
[  802.470063]  __get_vm_area_node+0x12b/0x3a0
[  802.474405]  __vmalloc_node_range+0xd4/0x790
[  802.478826]  ? n_tty_open+0x1b/0x170
[  802.482549]  ? tty_set_ldisc+0x268/0x690
[  802.486799]  ? n_tty_open+0x1b/0x170
[  802.490527]  ? n_tty_set_termios+0xe70/0xe70
[  802.494954]  vzalloc+0x6b/0x90
[  802.498170]  ? n_tty_open+0x1b/0x170
[  802.501894]  n_tty_open+0x1b/0x170
[  802.505447]  ? n_tty_set_termios+0xe70/0xe70
[  802.509868]  tty_ldisc_open.isra.0+0x8b/0xe0
[  802.514289]  tty_set_ldisc+0x2d7/0x690
[  802.518196]  tty_ioctl+0xe69/0x14d0
[  802.521839]  ? tty_vhangup+0x30/0x30
[  802.525574]  ? mark_held_locks+0x100/0x100
[  802.529823]  ? debug_smp_processor_id+0x1c/0x20
[  802.534507]  ? perf_trace_lock_acquire+0xf5/0x580
[  802.539367]  ? __fget+0x340/0x540
[  802.542833]  ? find_held_lock+0x35/0x130
[  802.546902]  ? __fget+0x340/0x540
[  802.550376]  ? tty_vhangup+0x30/0x30
[  802.554101]  do_vfs_ioctl+0xd6e/0x1390
[  802.558018]  ? ioctl_preallocate+0x210/0x210
[  802.562438]  ? smack_file_ioctl+0x196/0x300
[  802.566772]  ? smack_file_lock+0x240/0x240
[  802.571015]  ? __fget+0x367/0x540
[  802.574490]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  802.580036]  ? fput+0x128/0x1a0
[  802.583337]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  802.588889]  ? security_file_ioctl+0x93/0xc0
[  802.593314]  ksys_ioctl+0xab/0xd0
[  802.596784]  __x64_sys_ioctl+0x73/0xb0
[  802.600688]  do_syscall_64+0x103/0x610
[  802.604597]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  802.609792] RIP: 0033:0x457e29
[  802.612996] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  802.632399] RSP: 002b:00007f4875999c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  802.640122] RAX: ffffffffffffffda RBX: 00007f4875999c90 RCX: 0000000000457e29
[  802.647408] RDX: 0000000020000180 RSI: 0000000000005423 RDI: 0000000000000003
[  802.654684] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  802.661962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f487599a6d4
[  802.669237] R13: 00000000004c2118 R14: 00000000004d49d8 R15: 0000000000000006
[  802.683952] FAULT_INJECTION: forcing a failure.
[  802.683952] name failslab, interval 1, probability 0, space 0, times 0
[  802.741252] syz-executor.2: vmalloc: allocation failure: 9088 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  802.742635] CPU: 0 PID: 4332 Comm: syz-executor.1 Not tainted 5.0.0-rc7 #77
[  802.762118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  802.771482] Call Trace:
[  802.774082]  dump_stack+0x172/0x1f0
[  802.777723]  should_fail.cold+0xa/0x1b
[  802.781628]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  802.786739]  ? lock_downgrade+0x810/0x810
22:19:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  802.790899]  ? ___might_sleep+0x163/0x280
[  802.795063]  __should_failslab+0x121/0x190
[  802.799311]  should_failslab+0x9/0x14
[  802.803117]  kmem_cache_alloc+0x2be/0x710
[  802.807287]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[  802.812314]  ? anon_vma_compatible+0x70/0x2d0
[  802.816824]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  802.822373]  __anon_vma_prepare+0x1b1/0x3c0
[  802.826712]  do_huge_pmd_anonymous_page+0xf8c/0x1550
[  802.831831]  ? __lock_acquire+0x53b/0x4700
[  802.836075]  ? __thp_get_unmapped_area+0x190/0x190
22:19:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  802.841009]  ? pmd_val+0x100/0x100
[  802.844566]  __handle_mm_fault+0x2daf/0x3f20
[  802.848986]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  802.853832]  ? find_held_lock+0x35/0x130
[  802.857905]  ? handle_mm_fault+0x322/0xb30
[  802.862171]  ? kasan_check_read+0x11/0x20
[  802.866335]  handle_mm_fault+0x43f/0xb30
[  802.870416]  __do_page_fault+0x5da/0xd60
[  802.874504]  do_page_fault+0x71/0x581
[  802.878327]  page_fault+0x1e/0x30
[  802.881793] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  802.887426] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  802.906344] RSP: 0018:ffff88805cabfcc8 EFLAGS: 00010206
[  802.911716] RAX: ffffed100b957fb0 RBX: 0000000000000030 RCX: 0000000000000006
[  802.918991] RDX: 0000000000000000 RSI: ffff88805cabfd50 RDI: 0000000020000000
[  802.926265] RBP: ffff88805cabfd00 R08: 0000000000000000 R09: ffffed100b957fb0
[  802.933542] R10: ffffed100b957faf R11: ffff88805cabfd7f R12: 0000000020000000
[  802.940813] R13: ffff88805cabfd50 R14: 0000000020000030 R15: 00007ffffffff000
[  802.948121]  ? _copy_to_user+0xf7/0x120
[  802.952159]  ksys_shmctl+0x313/0x3b0
[  802.955886]  ? __ia32_sys_shmget+0x1d0/0x1d0
[  802.960307]  ? kasan_check_write+0x14/0x20
[  802.964557]  ? wait_for_completion+0x440/0x440
[  802.969164]  ? __sb_end_write+0xd9/0x110
[  802.973243]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  802.978793]  ? fput+0x128/0x1a0
[  802.982086]  ? ksys_write+0x166/0x1f0
[  802.985904]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  802.990667]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  802.995439]  ? do_syscall_64+0x26/0x610
[  802.999423]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  803.004791]  ? do_syscall_64+0x26/0x610
[  803.008785]  __x64_sys_shmctl+0x73/0xb0
[  803.012775]  do_syscall_64+0x103/0x610
[  803.016675]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  803.021873] RIP: 0033:0x457e29
[  803.025076] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  803.043984] RSP: 002b:00007f32e37dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  803.051702] RAX: ffffffffffffffda RBX: 00007f32e37dac90 RCX: 0000000000457e29
[  803.058977] RDX: 0000000020000000 RSI: 000000000000000e RDI: 0000000000000000
[  803.066248] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  803.073521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32e37db6d4
[  803.080821] R13: 00000000004c6060 R14: 00000000004db158 R15: 0000000000000003
[  803.088700] CPU: 0 PID: 4317 Comm: syz-executor.2 Not tainted 5.0.0-rc7 #77
[  803.095809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  803.095816] Call Trace:
[  803.095842]  dump_stack+0x172/0x1f0
[  803.095864]  warn_alloc.cold+0x87/0x17f
[  803.095881]  ? zone_watermark_ok_safe+0x260/0x260
[  803.095899]  ? rcu_read_lock_sched_held+0x110/0x130
[  803.095930]  ? __get_vm_area_node+0x2df/0x3a0
[  803.095954]  __vmalloc_node_range+0x48a/0x790
[  803.095969]  ? tty_set_ldisc+0x268/0x690
[  803.095991]  ? n_tty_open+0x1b/0x170
[  803.115512]  ? n_tty_set_termios+0xe70/0xe70
[  803.115531]  vzalloc+0x6b/0x90
[  803.115545]  ? n_tty_open+0x1b/0x170
[  803.115558]  n_tty_open+0x1b/0x170
[  803.115573]  ? n_tty_set_termios+0xe70/0xe70
[  803.115587]  tty_ldisc_open.isra.0+0x8b/0xe0
[  803.115604]  tty_set_ldisc+0x2d7/0x690
[  803.125467]  tty_ioctl+0xe69/0x14d0
[  803.125487]  ? tty_vhangup+0x30/0x30
[  803.125512]  ? mark_held_locks+0x100/0x100
[  803.125531]  ? debug_smp_processor_id+0x1c/0x20
[  803.125545]  ? perf_trace_lock_acquire+0xf5/0x580
[  803.125564]  ? __fget+0x340/0x540
[  803.125580]  ? find_held_lock+0x35/0x130
[  803.125594]  ? __fget+0x340/0x540
[  803.125613]  ? tty_vhangup+0x30/0x30
[  803.125628]  do_vfs_ioctl+0xd6e/0x1390
[  803.125646]  ? ioctl_preallocate+0x210/0x210
[  803.125661]  ? smack_file_ioctl+0x196/0x300
[  803.125677]  ? smack_file_lock+0x240/0x240
[  803.125688]  ? __fget+0x367/0x540
[  803.125711]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  803.125726]  ? fput+0x128/0x1a0
[  803.125746]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  803.125762]  ? security_file_ioctl+0x93/0xc0
[  803.125778]  ksys_ioctl+0xab/0xd0
[  803.125794]  __x64_sys_ioctl+0x73/0xb0
[  803.125813]  do_syscall_64+0x103/0x610
[  803.125833]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  803.139214] RIP: 0033:0x457e29
[  803.147305] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  803.147314] RSP: 002b:00007f4875999c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  803.147330] RAX: ffffffffffffffda RBX: 00007f4875999c90 RCX: 0000000000457e29
[  803.147339] RDX: 0000000020000180 RSI: 0000000000005423 RDI: 0000000000000003
[  803.147348] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  803.147357] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f487599a6d4
[  803.147366] R13: 00000000004c2118 R14: 00000000004d49d8 R15: 0000000000000006
[  803.152575] Mem-Info:
[  803.202971] active_anon:138413 inactive_anon:8351 isolated_anon:0
[  803.202971]  active_file:17161 inactive_file:29832 isolated_file:0
[  803.202971]  unevictable:1024 dirty:250 writeback:0 unstable:0
[  803.202971]  slab_reclaimable:13855 slab_unreclaimable:110432
[  803.202971]  mapped:58571 shmem:252 pagetables:1462 bounce:0
[  803.202971]  free:1207199 free_pcp:480 free_cma:0
[  803.215271] Node 0 active_anon:553652kB inactive_anon:33404kB active_file:68508kB inactive_file:119328kB unevictable:4096kB isolated(anon):0kB isolated(file):0kB mapped:234284kB dirty:996kB writeback:0kB shmem:1008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 215040kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  803.223825] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  803.242446] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  803.257028] lowmem_reserve[]: 0 2553 2555 2555
[  803.433650] print_req_error: 173 callbacks suppressed
[  803.433662] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.447093] Node 0 DMA32 free:1029360kB min:36232kB low:45288kB high:54344kB active_anon:553840kB inactive_anon:33400kB active_file:68508kB inactive_file:119276kB unevictable:4096kB writepending:1052kB present:3129332kB managed:2617972kB mlocked:4096kB kernel_stack:7680kB pagetables:5860kB bounce:0kB free_pcp:1748kB local_pcp:616kB free_cma:0kB
[  803.451492] buffer_io_error: 173 callbacks suppressed
[  803.451502] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.456744] lowmem_reserve[]: 0 0 2 2
[  803.469191] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.494285] Node 0 Normal free:1844kB min:2076kB low:2080kB high:2084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  803.494324] lowmem_reserve[]: 0 0 0 0
[  803.499603] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.507985] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.511770] Node 1 Normal free:3780964kB min:53624kB low:67028kB high:80432kB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  803.517067] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.518328] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.544274] lowmem_reserve[]: 0 0 0 0
[  803.547666] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.553748] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.555207] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[  803.561281] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.562731] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.589460] Node 0 DMA32: 6774*4kB (UME) 3496*8kB (UME) 4097*16kB (UME) 2502*32kB (UM) 1279*64kB (UM) 208*128kB (UME) 35*256kB (UM) 9*512kB (UME) 6*1024kB (UME) 2*2048kB (M) 170*4096kB (M) = 1029288kB
[  803.596102] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.597590] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.602737] Node 0 Normal: 3*4kB (ME) 5*8kB (ME) 2*16kB (ME) 1*32kB (M) 1*64kB (E) 1*128kB (M) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 1844kB
[  803.606450] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.616861] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.621490] Node 1 Normal: 61*4kB (UM) 248*8kB (UE) 263*16kB (UE) 56*32kB (UME) 21*64kB (UME) 14*128kB (UE) 7*256kB (UM) 3*512kB (ME) 4*1024kB (UME) 1*2048kB (U) 918*4096kB (M) = 3780964kB
[  803.633892] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.634641] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.641613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  803.647513] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.654383] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  803.665964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  803.672693] Buffer I/O error on dev loop0, logical block 0, async page read
[  803.775538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  803.784553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  803.793342] 47235 total pagecache pages
[  803.797461] 0 pages in swap cache
[  803.800916] Swap cache stats: add 0, delete 0, find 0/0
[  803.806412] Free swap  = 0kB
[  803.809433] Total swap = 0kB
[  803.812448] 1965979 pages RAM
[  803.815962] 0 pages HighMem/MovableOnly
[  803.819924] 339412 pages reserved
[  803.823371] 0 pages cma reserved
[  804.305585] Bluetooth: hci0: command 0x1003 tx timeout
[  804.312233] Bluetooth: hci0: sending frame failed (-49)
[  806.385629] Bluetooth: hci0: command 0x1001 tx timeout
[  806.391026] Bluetooth: hci0: sending frame failed (-49)
[  808.465590] Bluetooth: hci0: command 0x1009 tx timeout
22:19:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

22:19:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:19:56 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:19:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:19:56 executing program 1 (fault-call:0 fault-nth:2):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:19:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))

[  812.092553] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  812.124507] FAULT_INJECTION: forcing a failure.
[  812.124507] name failslab, interval 1, probability 0, space 0, times 0
[  812.155006] CPU: 0 PID: 4356 Comm: syz-executor.1 Not tainted 5.0.0-rc7 #77
[  812.162165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  812.171529] Call Trace:
[  812.174134]  dump_stack+0x172/0x1f0
[  812.177790]  should_fail.cold+0xa/0x1b
[  812.181701]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  812.186821]  ? lock_downgrade+0x810/0x810
[  812.190982]  ? ___might_sleep+0x163/0x280
[  812.195157]  __should_failslab+0x121/0x190
[  812.195179]  should_failslab+0x9/0x14
[  812.195194]  kmem_cache_alloc+0x2be/0x710
[  812.195232]  __khugepaged_enter+0x3b/0x390
[  812.195250]  do_huge_pmd_anonymous_page+0xffd/0x1550
[  812.195270]  ? __thp_get_unmapped_area+0x190/0x190
[  812.195281]  ? pmd_val+0x100/0x100
[  812.195307]  __handle_mm_fault+0x2daf/0x3f20
[  812.211924]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  812.211942]  ? find_held_lock+0x35/0x130
[  812.211958]  ? handle_mm_fault+0x322/0xb30
[  812.225527]  ? kasan_check_read+0x11/0x20
[  812.225552]  handle_mm_fault+0x43f/0xb30
22:19:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  812.225578]  __do_page_fault+0x5da/0xd60
[  812.225606]  do_page_fault+0x71/0x581
[  812.225625]  page_fault+0x1e/0x30
[  812.225641] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  812.225656] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  812.225663] RSP: 0018:ffff88804d707cc8 EFLAGS: 00010206
[  812.225676] RAX: ffffed1009ae0fb0 RBX: 0000000000000030 RCX: 0000000000000006
22:19:57 executing program 1 (fault-call:0 fault-nth:3):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:19:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  812.225684] RDX: 0000000000000000 RSI: ffff88804d707d50 RDI: 0000000020000000
[  812.225693] RBP: ffff88804d707d00 R08: 0000000000000000 R09: ffffed1009ae0fb0
[  812.225702] R10: ffffed1009ae0faf R11: ffff88804d707d7f R12: 0000000020000000
[  812.225711] R13: ffff88804d707d50 R14: 0000000020000030 R15: 00007ffffffff000
[  812.225746]  ? _copy_to_user+0xf7/0x120
[  812.225769]  ksys_shmctl+0x313/0x3b0
[  812.225788]  ? __ia32_sys_shmget+0x1d0/0x1d0
[  812.225804]  ? kasan_check_write+0x14/0x20
[  812.225827]  ? wait_for_completion+0x440/0x440
[  812.225848]  ? __sb_end_write+0xd9/0x110
[  812.225868]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  812.225889]  ? fput+0x128/0x1a0
[  812.225906]  ? ksys_write+0x166/0x1f0
[  812.225926]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  812.225942]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  812.225958]  ? do_syscall_64+0x26/0x610
[  812.225974]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  812.235224]  ? do_syscall_64+0x26/0x610
[  812.235250]  __x64_sys_shmctl+0x73/0xb0
[  812.235270]  do_syscall_64+0x103/0x610
[  812.235290]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  812.235307] RIP: 0033:0x457e29
[  812.235322] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  812.259899] RSP: 002b:00007f32e37dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  812.259916] RAX: ffffffffffffffda RBX: 00007f32e37dac90 RCX: 0000000000457e29
[  812.259925] RDX: 0000000020000000 RSI: 000000000000000e RDI: 0000000000000000
[  812.259935] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  812.259944] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32e37db6d4
[  812.259954] R13: 00000000004c6060 R14: 00000000004db158 R15: 0000000000000003
[  812.371895] FAULT_INJECTION: forcing a failure.
[  812.371895] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  812.407924] CPU: 0 PID: 4364 Comm: syz-executor.1 Not tainted 5.0.0-rc7 #77
[  812.441747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  812.456266] Call Trace:
[  812.456292]  dump_stack+0x172/0x1f0
[  812.456314]  should_fail.cold+0xa/0x1b
[  812.456332]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  812.514689]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  812.519469]  ? lockdep_hardirqs_on+0x415/0x5d0
[  812.524061]  ? retint_kernel+0x2d/0x2d
[  812.524079]  ? trace_hardirqs_on_caller+0x6a/0x220
[  812.524099]  should_fail_alloc_page+0x50/0x60
[  812.524117]  __alloc_pages_nodemask+0x1a1/0x710
[  812.537424]  ? __alloc_pages_slowpath+0x2900/0x2900
[  812.537453]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  812.537468]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  812.537491]  alloc_pages_vma+0x39a/0x540
[  812.537515]  do_huge_pmd_anonymous_page+0x509/0x1550
[  812.537538]  ? __thp_get_unmapped_area+0x190/0x190
[  812.552741]  ? pmd_val+0x100/0x100
[  812.552769]  __handle_mm_fault+0x2daf/0x3f20
[  812.552792]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  812.558647] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  812.562373]  ? find_held_lock+0x35/0x130
[  812.562391]  ? handle_mm_fault+0x322/0xb30
[  812.562421]  ? kasan_check_read+0x11/0x20
[  812.575948]  handle_mm_fault+0x43f/0xb30
[  812.575974]  __do_page_fault+0x5da/0xd60
[  812.576003]  do_page_fault+0x71/0x581
[  812.576024]  page_fault+0x1e/0x30
[  812.576041] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  812.576057] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  812.645150] RSP: 0018:ffff88804d23fcc8 EFLAGS: 00010206
[  812.650521] RAX: ffffed1009a47fb0 RBX: 0000000000000030 RCX: 0000000000000006
[  812.657800] RDX: 0000000000000000 RSI: ffff88804d23fd50 RDI: 0000000020000000
[  812.665084] RBP: ffff88804d23fd00 R08: 0000000000000000 R09: ffffed1009a47fb0
[  812.672362] R10: ffffed1009a47faf R11: ffff88804d23fd7f R12: 0000000020000000
[  812.679628] R13: ffff88804d23fd50 R14: 0000000020000030 R15: 00007ffffffff000
[  812.686924]  ? _copy_to_user+0xf7/0x120
[  812.690918]  ksys_shmctl+0x313/0x3b0
[  812.694630]  ? __ia32_sys_shmget+0x1d0/0x1d0
[  812.699031]  ? kasan_check_write+0x14/0x20
[  812.703255]  ? wait_for_completion+0x440/0x440
[  812.707841]  ? __sb_end_write+0xd9/0x110
[  812.711913]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  812.717447]  ? fput+0x128/0x1a0
[  812.720716]  ? ksys_write+0x166/0x1f0
[  812.724507]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  812.729266]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  812.734020]  ? do_syscall_64+0x26/0x610
[  812.737988]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  812.743339]  ? do_syscall_64+0x26/0x610
[  812.747320]  __x64_sys_shmctl+0x73/0xb0
[  812.751305]  do_syscall_64+0x103/0x610
[  812.755195]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  812.760380] RIP: 0033:0x457e29
[  812.763556] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  812.782448] RSP: 002b:00007f32e37dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  812.790164] RAX: ffffffffffffffda RBX: 00007f32e37dac90 RCX: 0000000000457e29
[  812.797445] RDX: 0000000020000000 RSI: 000000000000000e RDI: 0000000000000000
22:19:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:19:57 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x301}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  812.804712] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  812.811982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32e37db6d4
[  812.819248] R13: 00000000004c6060 R14: 00000000004db158 R15: 0000000000000003
22:19:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000180))

[  812.876492] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  813.049200] print_req_error: 51 callbacks suppressed
[  813.049211] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.060796] buffer_io_error: 51 callbacks suppressed
[  813.060809] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.073337] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.079806] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.087115] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.093528] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.100997] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.107456] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.114811] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.121292] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.128664] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.135104] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.142545] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.148995] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.156380] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.162818] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.170620] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.177046] Buffer I/O error on dev loop0, logical block 0, async page read
[  813.184343] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  813.190831] Buffer I/O error on dev loop0, logical block 0, async page read
[  814.625493] Bluetooth: hci0: command 0x1003 tx timeout
[  814.630888] Bluetooth: hci0: sending frame failed (-49)
[  816.705543] Bluetooth: hci0: command 0x1001 tx timeout
[  816.710941] Bluetooth: hci0: sending frame failed (-49)
[  818.785527] Bluetooth: hci0: command 0x1009 tx timeout
22:20:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:20:07 executing program 1 (fault-call:0 fault-nth:4):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:20:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:07 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:07 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180))

22:20:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000180))

[  823.015819] FAULT_INJECTION: forcing a failure.
[  823.015819] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  823.035718] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  823.050704] CPU: 0 PID: 4398 Comm: syz-executor.1 Not tainted 5.0.0-rc7 #77
[  823.057829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  823.067184] Call Trace:
[  823.069787]  dump_stack+0x172/0x1f0
[  823.073426]  should_fail.cold+0xa/0x1b
[  823.077324]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  823.082432]  ? ___might_sleep+0x163/0x280
[  823.085918] Bluetooth: Invalid header checksum
[  823.086593]  should_fail_alloc_page+0x50/0x60
[  823.091856] Bluetooth: Invalid header checksum
[  823.096082]  __alloc_pages_nodemask+0x1a1/0x710
[  823.096098]  ? mem_cgroup_throttle_swaprate+0x196/0x66e
[  823.096120]  ? __alloc_pages_slowpath+0x2900/0x2900
[  823.096157]  ? kasan_check_read+0x11/0x20
[  823.096176]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  823.096199]  alloc_pages_current+0x107/0x210
[  823.096289]  pte_alloc_one+0x1b/0x1a0
[  823.096309]  do_huge_pmd_anonymous_page+0x6f6/0x1550
[  823.138825]  ? __thp_get_unmapped_area+0x190/0x190
[  823.143762]  __handle_mm_fault+0x2daf/0x3f20
[  823.148176]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  823.153011]  ? find_held_lock+0x35/0x130
[  823.157081]  ? handle_mm_fault+0x322/0xb30
[  823.161340]  ? kasan_check_read+0x11/0x20
[  823.165506]  handle_mm_fault+0x43f/0xb30
[  823.169571]  __do_page_fault+0x5da/0xd60
[  823.173626]  do_page_fault+0x71/0x581
[  823.177431]  page_fault+0x1e/0x30
[  823.180882] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  823.186502] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  823.205409] RSP: 0018:ffff888088a67cc8 EFLAGS: 00010206
[  823.210771] RAX: ffffed101114cfb0 RBX: 0000000000000030 RCX: 0000000000000006
[  823.218037] RDX: 0000000000000000 RSI: ffff888088a67d50 RDI: 0000000020000000
[  823.225300] RBP: ffff888088a67d00 R08: 0000000000000000 R09: ffffed101114cfb0
[  823.232555] R10: ffffed101114cfaf R11: ffff888088a67d7f R12: 0000000020000000
[  823.239818] R13: ffff888088a67d50 R14: 0000000020000030 R15: 00007ffffffff000
[  823.247122]  ? _copy_to_user+0xf7/0x120
[  823.251119]  ksys_shmctl+0x313/0x3b0
[  823.254846]  ? __ia32_sys_shmget+0x1d0/0x1d0
[  823.259254]  ? kasan_check_write+0x14/0x20
[  823.263506]  ? wait_for_completion+0x440/0x440
[  823.268104]  ? __sb_end_write+0xd9/0x110
[  823.272173]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  823.277705]  ? fput+0x128/0x1a0
[  823.280981]  ? ksys_write+0x166/0x1f0
[  823.284772]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  823.289513]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  823.294290]  ? do_syscall_64+0x26/0x610
[  823.298262]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  823.303621]  ? do_syscall_64+0x26/0x610
[  823.307601]  __x64_sys_shmctl+0x73/0xb0
[  823.311581]  do_syscall_64+0x103/0x610
[  823.315473]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  823.320658] RIP: 0033:0x457e29
[  823.323845] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  823.342745] RSP: 002b:00007f32e37dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  823.350437] RAX: ffffffffffffffda RBX: 00007f32e37dac90 RCX: 0000000000457e29
[  823.357698] RDX: 0000000020000000 RSI: 000000000000000e RDI: 0000000000000000
22:20:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:08 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180))

[  823.364964] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  823.372233] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32e37db6d4
[  823.379507] R13: 00000000004c6060 R14: 00000000004db158 R15: 0000000000000003
22:20:08 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

22:20:08 executing program 1 (fault-call:0 fault-nth:5):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:20:08 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000180))

[  823.451884] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:20:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000180))

[  823.566593] FAULT_INJECTION: forcing a failure.
[  823.566593] name failslab, interval 1, probability 0, space 0, times 0
[  823.586176] CPU: 0 PID: 4413 Comm: syz-executor.1 Not tainted 5.0.0-rc7 #77
[  823.593324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  823.602678] Call Trace:
[  823.605286]  dump_stack+0x172/0x1f0
[  823.608940]  should_fail.cold+0xa/0x1b
[  823.612848]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  823.617961]  ? lock_downgrade+0x810/0x810
[  823.622123]  ? ___might_sleep+0x163/0x280
[  823.626300]  __should_failslab+0x121/0x190
[  823.630550]  should_failslab+0x9/0x14
[  823.634354]  kmem_cache_alloc+0x2be/0x710
[  823.638510]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  823.644061]  ptlock_alloc+0x20/0x70
[  823.647698]  pte_alloc_one+0x6d/0x1a0
[  823.651506]  do_huge_pmd_anonymous_page+0x6f6/0x1550
[  823.656636]  ? __thp_get_unmapped_area+0x190/0x190
[  823.661591]  __handle_mm_fault+0x2daf/0x3f20
[  823.666049]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  823.670905]  ? find_held_lock+0x35/0x130
[  823.674992]  ? handle_mm_fault+0x322/0xb30
[  823.679260]  ? kasan_check_read+0x11/0x20
[  823.683432]  handle_mm_fault+0x43f/0xb30
[  823.687513]  __do_page_fault+0x5da/0xd60
[  823.691601]  do_page_fault+0x71/0x581
[  823.695417]  page_fault+0x1e/0x30
[  823.698886] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  823.704518] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  823.723432] RSP: 0018:ffff8880563a7cc8 EFLAGS: 00010206
[  823.726213] Bluetooth: Invalid header checksum
[  823.728799] RAX: ffffed100ac74fb0 RBX: 0000000000000030 RCX: 0000000000000006
[  823.728810] RDX: 0000000000000000 RSI: ffff8880563a7d50 RDI: 0000000020000000
[  823.728820] RBP: ffff8880563a7d00 R08: 0000000000000000 R09: ffffed100ac74fb0
[  823.728831] R10: ffffed100ac74faf R11: ffff8880563a7d7f R12: 0000000020000000
22:20:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  823.728841] R13: ffff8880563a7d50 R14: 0000000020000030 R15: 00007ffffffff000
[  823.728884]  ? _copy_to_user+0xf7/0x120
[  823.728906]  ksys_shmctl+0x313/0x3b0
[  823.734157] Bluetooth: Invalid header checksum
[  823.740753]  ? __ia32_sys_shmget+0x1d0/0x1d0
[  823.740772]  ? kasan_check_write+0x14/0x20
[  823.740798]  ? wait_for_completion+0x440/0x440
[  823.740819]  ? __sb_end_write+0xd9/0x110
[  823.740839]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  823.740853]  ? fput+0x128/0x1a0
[  823.740870]  ? ksys_write+0x166/0x1f0
[  823.740891]  ? trace_hardirqs_on_thunk+0x1a/0x1c
22:20:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  823.740906]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  823.740922]  ? do_syscall_64+0x26/0x610
[  823.740936]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  823.740952]  ? do_syscall_64+0x26/0x610
[  823.773978]  __x64_sys_shmctl+0x73/0xb0
[  823.782260]  do_syscall_64+0x103/0x610
[  823.782284]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  823.782297] RIP: 0033:0x457e29
[  823.782313] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  823.782325] RSP: 002b:00007f32e37dac78 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  823.834915] RAX: ffffffffffffffda RBX: 00007f32e37dac90 RCX: 0000000000457e29
[  823.834925] RDX: 0000000020000000 RSI: 000000000000000e RDI: 0000000000000000
[  823.834935] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  823.834945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32e37db6d4
[  823.834955] R13: 00000000004c6060 R14: 00000000004db158 R15: 0000000000000003
22:20:08 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

[  823.862787] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  823.878359] Bluetooth: Invalid header checksum
22:20:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x8b2}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:08 executing program 1 (fault-call:0 fault-nth:6):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

22:20:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000180))

22:20:08 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180))

[  824.034769] print_req_error: 51 callbacks suppressed
[  824.034777] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.046558] buffer_io_error: 51 callbacks suppressed
[  824.046570] Buffer I/O error on dev loop0, logical block 0, async page read
[  824.093695] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:20:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:09 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)

[  824.142001] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.148549] Buffer I/O error on dev loop0, logical block 0, async page read
22:20:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  824.212196] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.218739] Buffer I/O error on dev loop0, logical block 0, async page read
[  824.235841] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.242373] Buffer I/O error on dev loop0, logical block 0, async page read
22:20:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:09 executing program 1:
shmctl$SHM_INFO(0x0, 0x2, &(0x7f0000000000)=""/43)

[  824.267301] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.273868] Buffer I/O error on dev loop0, logical block 0, async page read
[  824.284095] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  824.309393] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.315912] Buffer I/O error on dev loop0, logical block 0, async page read
[  824.323656] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
[  824.332568] Bluetooth: Invalid header checksum
[  824.337441] Bluetooth: Invalid header checksum
[  824.342297] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.348853] Buffer I/O error on dev loop0, logical block 0, async page read
22:20:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

[  824.395167] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.401756] Buffer I/O error on dev loop0, logical block 0, async page read
[  824.426200] Bluetooth: Invalid header checksum
[  824.465873] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.472435] Buffer I/O error on dev loop0, logical block 0, async page read
[  824.480988] print_req_error: I/O error, dev loop0, sector 0 flags 0
[  824.487526] Buffer I/O error on dev loop0, logical block 0, async page read
[  824.519259] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:20:09 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:09 executing program 1:
shmctl$SHM_INFO(0x0, 0x3, &(0x7f0000000000)=""/43)

22:20:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:09 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

22:20:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000180))

[  824.796956] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:20:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:09 executing program 1:
shmctl$SHM_INFO(0x0, 0xb, &(0x7f0000000000)=""/43)

22:20:09 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

22:20:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

[  825.003590] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:20:10 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:10 executing program 1:
shmctl$SHM_INFO(0x0, 0xc, &(0x7f0000000000)=""/43)

22:20:10 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:10 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

22:20:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000180))

22:20:10 executing program 1:
shmctl$SHM_INFO(0x0, 0xd, &(0x7f0000000000)=""/43)

[  825.681677] netlink: 'syz-executor.5': attribute type 15 has an invalid length.
22:20:10 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:10 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:10 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:10 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000180))

22:20:11 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:11 executing program 1:
shmctl$SHM_INFO(0x0, 0xf, &(0x7f0000000000)=""/43)

22:20:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:11 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000180))

22:20:11 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xfffffffffffffc01, {0x0, 0x7fff, 0x0, 0xe8f, 0x6, 0x6}, 0x1ff, 0x8}, 0xe)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=<r1=>0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x8, 0x85, 0x7, 0x5, 0x0, 0x9, 0x10000, 0xe, 0x3ff, 0x9, 0x1, 0x10000, 0x6, 0xffff, 0x2a0, 0x7, 0x2, 0x400, 0x40, 0x1, 0xdf40, 0xd3, 0x8, 0x5635, 0x6, 0x9, 0x7, 0x3, 0x400, 0x9, 0x8, 0x5, 0x7, 0x8, 0x1, 0x200, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x4, 0x7, 0x5, 0x4, 0xfffffffffffffffe, 0x7, 0x3}, r1, 0x7, r0, 0xa)

22:20:11 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:11 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:11 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000180))

22:20:12 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:12 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/43)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10480, 0x0)
getsockname$tipc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

22:20:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:12 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000180))

22:20:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:12 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10)
shmget(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080))
r1 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil)
lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x2, 0xd, 0xc5, 0xea, "e7a09dd92f24e28bd2f5d2bc6a4c5f06f357dd47ae245971d18a2515d3cdb14c1e938780f8bf9e70c1c8e897cca65c285cda4ff1920fe395cb6e66679eb62d99f5d0ef30defcb8a5a80edfaeb5b967b1df7a1cf0b48d2a375428c516617717ed251bb72f1e930c069eb5ccc758c089d3cf91d68f1ba99ecf1b3aa89d0de09dcefec6aa59cf78547d42f7fb9610ea12f8bbedc0e637127dd44cf8ef57088a8521413804dc871abf0ccb6a05f430a9f6b501f40f20b52268705140e44d184f719802bb477f7225e2e6c626d8f793702e336ae9dd73b6bfdf06e0fe880ea2ff9f67d3613ecedbbae131afbb"}, 0xf4, 0x2)
sendfile(r0, r0, &(0x7f0000000100), 0x85)
shmctl$SHM_INFO(r1, 0xe, &(0x7f00000002c0)=""/43)

22:20:12 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000180))

22:20:12 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
poll(&(0x7f0000000000)=[{r1, 0x8030}], 0x1, 0xfffffffffffffff8)

22:20:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0x86}}, 0x0)

22:20:12 executing program 1:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/43)

22:20:12 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)
ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000180))

[  827.786461] Bluetooth: hci0: Frame reassembly failed (-84)
[  827.787105] BUG: unable to handle kernel paging request at ffffffffffffffd6
[  827.799240] #PF error: [normal kernel read fault]
[  827.804083] PGD 8874067 P4D 8874067 PUD 8876067 PMD 0 
[  827.809381] Oops: 0000 [#1] PREEMPT SMP KASAN
[  827.813882] CPU: 0 PID: 4619 Comm: syz-executor.4 Not tainted 5.0.0-rc7 #77
[  827.820986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  827.830448] RIP: 0010:h4_recv_buf+0x1ea/0xda0
[  827.834951] Code: b6 14 10 48 89 c8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 d7 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 45 d0 4c 8d 60 70 <0f> b7 58 2a 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 c0 74 08 3c 03 0f
[  827.853846] RSP: 0018:ffff88805b247a30 EFLAGS: 00010246
[  827.859203] RAX: ffffffffffffffac RBX: 0000000000000000 RCX: ffffffffffffffd6
[  827.866481] RDX: dffffc0000000000 RSI: ffffffff84ed1f42 RDI: 0000000000000005
[  827.873754] RBP: ffff88805b247ab8 R08: ffff8880569f6140 R09: 0000000000000003
[  827.881064] R10: ffffed1015d05bcf R11: ffff8880ae82de7b R12: 000000000000001c
[  827.888341] R13: ffff888094f5b7c0 R14: ffff88805b247b98 R15: 0000000000000001
[  827.895618] FS:  00007f4126d45700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  827.903844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  827.909722] CR2: ffffffffffffffd6 CR3: 00000000a192d000 CR4: 00000000001406f0
[  827.917001] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  827.924272] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  827.931540] Call Trace:
[  827.934141]  ? __lock_is_held+0xb6/0x140
[  827.938227]  ? check_preemption_disabled+0x48/0x290
[  827.943255]  h4_recv+0xe4/0x200
[  827.946548]  hci_uart_tty_receive+0x22b/0x530
[  827.951051]  ? hci_uart_write_work+0x710/0x710
[  827.955649]  tty_ioctl+0x936/0x14d0
[  827.955654] Bluetooth: Invalid header checksum
[  827.955695] Bluetooth: Invalid header checksum
[  827.959286]  ? tty_vhangup+0x30/0x30
[  827.959307]  ? mark_held_locks+0x100/0x100
[  827.959326]  ? debug_smp_processor_id+0x1c/0x20
[  827.981064]  ? perf_trace_lock_acquire+0xf5/0x580
[  827.985920]  ? __fget+0x340/0x540
[  827.989387]  ? find_held_lock+0x35/0x130
[  827.993454]  ? __fget+0x340/0x540
[  827.996923]  ? tty_vhangup+0x30/0x30
[  828.000643]  do_vfs_ioctl+0xd6e/0x1390
[  828.004540]  ? ioctl_preallocate+0x210/0x210
[  828.008956]  ? smack_file_ioctl+0x196/0x300
[  828.013289]  ? smack_file_lock+0x240/0x240
[  828.017526]  ? __fget+0x367/0x540
[  828.021050]  ? nsecs_to_jiffies+0x30/0x30
[  828.025219]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  828.030762]  ? security_file_ioctl+0x93/0xc0
[  828.035196]  ksys_ioctl+0xab/0xd0
[  828.038655]  __x64_sys_ioctl+0x73/0xb0
[  828.042559]  do_syscall_64+0x103/0x610
[  828.046456]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.051647] RIP: 0033:0x457e29
[  828.054847] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  828.065710] Bluetooth: Invalid header checksum
[  828.073749] RSP: 002b:00007f4126d44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  828.073765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29
[  828.073773] RDX: 0000000020000180 RSI: 0000000000005412 RDI: 0000000000000003
[  828.073785] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  828.107837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4126d456d4
[  828.115107] R13: 00000000004c2118 R14: 00000000004d49d8 R15: 00000000ffffffff
[  828.122390] Modules linked in:
[  828.125586] CR2: ffffffffffffffd6
[  828.129049] ---[ end trace 9ab6db71b11cb32a ]---
[  828.133820] RIP: 0010:h4_recv_buf+0x1ea/0xda0
[  828.138324] Code: b6 14 10 48 89 c8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 d7 0a 00 00 48 ba 00 00 00 00 00 fc ff df 48 8b 45 d0 4c 8d 60 70 <0f> b7 58 2a 4c 89 e0 48 c1 e8 03 0f b6 04 10 84 c0 74 08 3c 03 0f
[  828.157233] RSP: 0018:ffff88805b247a30 EFLAGS: 00010246
[  828.162602] RAX: ffffffffffffffac RBX: 0000000000000000 RCX: ffffffffffffffd6
[  828.169879] RDX: dffffc0000000000 RSI: ffffffff84ed1f42 RDI: 0000000000000005
[  828.175608] Bluetooth: Invalid header checksum
[  828.177165] RBP: ffff88805b247ab8 R08: ffff8880569f6140 R09: 0000000000000003
[  828.177181] R10: ffffed1015d05bcf R11: ffff8880ae82de7b R12: 000000000000001c
[  828.177191] R13: ffff888094f5b7c0 R14: ffff88805b247b98 R15: 0000000000000001
[  828.177204] FS:  00007f4126d45700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  828.177216] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  828.217656] CR2: ffffffffffffffd6 CR3: 00000000a192d000 CR4: 00000000001406f0
[  828.224930] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  828.232201] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  828.239480] Kernel panic - not syncing: Fatal exception
[  828.245897] Kernel Offset: disabled
[  828.249523] Rebooting in 86400 seconds..