xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(0x0, 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:13 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00?\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x87`\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:13 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000004c03f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 828.979600][ T6498] validate_nla: 12 callbacks suppressed [ 828.979610][ T6498] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:13 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000006003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:13 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00@\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:13 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00h\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 829.276595][ T6506] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:13 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x104) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) syz_open_dev$media(&(0x7f00000006c0)='/dev/media#\x00', 0xa28, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000006803f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:14 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(0x0, 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 829.563176][ T6618] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:14 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000006c03f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:14 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00H\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:14 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x0) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 829.897048][ T6832] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000007403f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:14 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x0) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 830.119433][ T6838] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:14 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00l\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000007a03f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:14 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(0x0, 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 830.264769][ T6916] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:14 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) sendfile(r0, r0, &(0x7f00000006c0), 0xaaf8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:14 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x0) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000005f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 830.446447][ T7021] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000006f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:15 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(0x0, 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 830.576667][ T7233] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:15 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00J\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:15 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(0x0, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000007f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:15 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00t\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:15 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(0x0, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 831.015019][ T7284] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000009f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d00000000000af50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 831.153222][ T7315] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:15 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/nullb0\x00', 0x2000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:15 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\"\x0f\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:15 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00L\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:15 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(0x0, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d00000000000bf50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000011f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:16 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000012f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:16 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00z\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:16 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000013f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:16 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\"\x0f\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:16 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = semget(0xffffffffffffffff, 0x2, 0x400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e22, 0x2000000005, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x104) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/467]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000050c16311978f8e14769c885c1c1039e18e5a3ff5b236df05118644ac61074b459aa19fac9e7300", @ANYRESHEX=r2, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x3}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:16 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:17 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00`\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d00000000005bf50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:17 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00t\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:17 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x02\x80\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:17 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, 0x0, 0x0, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:17 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000006c0)={0x2, 0x0, [{}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x73, "105c4b5afd8afad8c387a1701da5979cc1bb4a4e9347d1d592eaff168aacfc91555772e5b56407de4c0763c3e99a8228b434d7884b5a52155a2125c41d8276853b80463246cce50ee340a3d1059f3d92642ca14df967e6ae3f7d74523ede85498aeb7f34291ecab99f2910602fb14c3bc16359"}, &(0x7f0000000780)=0x7b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={r6, 0x100000000}, &(0x7f0000000a00)=0x8) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000002f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000004f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:17 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, 0x0, 0x0, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000005f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:17 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, 0x0, 0x0, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:17 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(0x0, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:17 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x87`\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000006f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:17 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0), 0x0, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:17 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x03\xe8\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:17 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, 0x0}, 0x4004) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r4 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) 14:16:18 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a80)=ANY=[]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000007f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:18 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0), 0x0, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:18 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x80\x02\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000008f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:18 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0), 0x0, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:18 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x03\xee\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:18 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00h\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000009f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:18 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d00000000000af50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 834.139819][ T9082] validate_nla: 12 callbacks suppressed [ 834.139835][ T9082] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:18 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 834.278472][ T9190] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x80\x02\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:19 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00l\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d00000000000bf50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:19 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r1) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:19 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:19 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xff\xfe\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 834.590678][ T9308] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000010f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:19 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 834.912402][ T9349] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000011f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:19 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000006c0)) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:19 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:19 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r1) sendfile(r4, r5, 0x0, 0x20000102000007) [ 835.000256][ T9628] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000012f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:19 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00t\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:19 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xfe\xff\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 835.170245][ T9641] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000013f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:19 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:19 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r1) sendfile(r4, r5, 0x0, 0x20000102000007) [ 835.323073][ T9756] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d00000000005bf50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:20 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f00000006c0)={0x4, "b9855ffcd6e92efca00f8da36450c4519aaafe9baf08b9eac751e53cc77764e9", 0x1, 0x1}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000700)=0x2, 0x4) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 835.424097][ T9819] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50200000e4800ef38bf461e59d7", 0x39}], 0x1) [ 835.547638][ T9920] QAT: Invalid ioctl 14:16:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x03\xee\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 835.612948][ T9920] QAT: Invalid ioctl [ 835.623831][T10013] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:20 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x18) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50300000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:20 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x0) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:20 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00z\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 835.910231][T10083] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:20 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa5H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50400000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:20 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x0) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50500000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50600000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:20 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x0) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:21 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00t\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50700000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:21 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xdf1, 0x100087) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50a00000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:21 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:21 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x02\x80\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:21 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa6H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50c00000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:21 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000006c0)={0x2, 0x0, [{}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x73, "105c4b5afd8afad8c387a1701da5979cc1bb4a4e9347d1d592eaff168aacfc91555772e5b56407de4c0763c3e99a8228b434d7884b5a52155a2125c41d8276853b80463246cce50ee340a3d1059f3d92642ca14df967e6ae3f7d74523ede85498aeb7f34291ecab99f2910602fb14c3bc16359"}, &(0x7f0000000780)=0x7b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={r6, 0x100000000}, &(0x7f0000000a00)=0x8) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50e00000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50f00000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:21 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:21 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000006c0)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f51000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:21 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000006c0)={0x2, 0x0, [{}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x73, "105c4b5afd8afad8c387a1701da5979cc1bb4a4e9347d1d592eaff168aacfc91555772e5b56407de4c0763c3e99a8228b434d7884b5a52155a2125c41d8276853b80463246cce50ee340a3d1059f3d92642ca14df967e6ae3f7d74523ede85498aeb7f34291ecab99f2910602fb14c3bc16359"}, &(0x7f0000000780)=0x7b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={r6, 0x100000000}, &(0x7f0000000a00)=0x8) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 837.284906][T10791] QAT: Invalid ioctl 14:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f54800000e4800ef38bf461e59d7", 0x39}], 0x1) [ 837.344465][T10863] QAT: Invalid ioctl 14:16:21 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x03\xe8\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:21 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa7H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:22 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0850a8139a6fc72415455bd6326befc6c5470cb8fb4acbc76cbf8f9a218febebc17b6e12c8a46f7335ed110a525bb532c0a59c216888844a14886d9c1feaf0e6a8cf95710370877a", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x26, "b21723474c62d9ca90f3352880c5fab00aad81afc3ee6705f9098ebf2e0524663af58a4908f4"}, &(0x7f0000000740)=0x2e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000780)={r6, 0x4}, &(0x7f00000007c0)=0x8) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000006c0)={0x2, 0x0, [{}, {}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x73, "105c4b5afd8afad8c387a1701da5979cc1bb4a4e9347d1d592eaff168aacfc91555772e5b56407de4c0763c3e99a8228b434d7884b5a52155a2125c41d8276853b80463246cce50ee340a3d1059f3d92642ca14df967e6ae3f7d74523ede85498aeb7f34291ecab99f2910602fb14c3bc16359"}, &(0x7f0000000780)=0x7b) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={r6, 0x100000000}, &(0x7f0000000a00)=0x8) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f54c00000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:22 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000006c0)=0x7fff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000006c0)=0x281, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f56000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:22 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x03\xee\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f56800000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:22 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000006c0)=0x7fff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa8H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 838.197596][T11109] QAT: Invalid ioctl 14:16:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f56c00000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:22 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f57400000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:23 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) flock(r0, 0x2) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:23 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f57a00000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:23 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f00000007c0)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) r6 = socket(0x800000000000010, 0x8000000803, 0x0) write(r6, &(0x7f0000000080)="220000002100070700be000009000701020000030000000000200003050013800200", 0x22) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) clock_nanosleep(0x0, 0x1ac93ce77ad15c6f, &(0x7f00000006c0), &(0x7f0000000700)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000740)="35e1639852a47408300b79954f54828f", 0x10) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:23 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xff\xfe\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:23 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:23 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000006c0)=0x7fff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000ccc5e0000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000008000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5f000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:23 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:23 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa9H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:23 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') socket$caif_seqpacket(0x25, 0x5, 0x1) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) syz_open_dev$vbi(&(0x7f00000006c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) sendfile(r4, r5, 0x0, 0x20000102000007) [ 839.191476][T11457] validate_nla: 16 callbacks suppressed [ 839.191484][T11457] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50003000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:23 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xfe\xff\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 839.398091][T11518] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:24 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xff\xfe\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50005000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:24 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x1, 0x3fd) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000006c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="21000000b879c703bb44babf4665b0707722dd29d195064c7f0593247c", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f00000001c0)={0x5, 0x0, 0x1006, 0xe3db, 0x0, {0x8001, 0x6913}}) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 839.614717][T11675] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 839.664123][T11725] QAT: Invalid ioctl 14:16:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50006000e4800ef38bf461e59d7", 0x39}], 0x1) [ 839.772562][T11725] QAT: Invalid ioctl [ 839.850588][T11766] QAT: Invalid ioctl [ 839.887490][T11766] QAT: Invalid ioctl 14:16:24 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1fL\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 839.939735][T11790] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:24 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x8eD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:24 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:24 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:24 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xaaH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50007000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:24 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 840.257494][T11804] QAT: Invalid ioctl [ 840.310490][T11872] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000a000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:25 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:25 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1fL\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 840.530575][T11938] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000c000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:25 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 840.821298][T12221] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000e000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:25 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x8fD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 840.900880][T12231] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 840.961072][T11804] QAT: Invalid ioctl 14:16:25 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000006c0)={0x401, 0x0, 0x6232}) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:25 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xabH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000f000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:25 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 841.108797][T12249] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50020000e4800ef38bf461e59d7", 0x39}], 0x1) [ 841.223408][T12293] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 841.249667][T12251] QAT: Invalid ioctl 14:16:25 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f54340000e4800ef38bf461e59d7", 0x39}], 0x1) [ 841.337897][T12251] QAT: Invalid ioctl 14:16:26 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000006c0)=r2) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f54043000e4800ef38bf461e59d7", 0x39}], 0x1) [ 841.602053][T12539] QAT: Invalid ioctl [ 841.728857][T12569] QAT: Invalid ioctl 14:16:26 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:26 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:26 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x90D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:26 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000006c0)=0x8) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:26 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xacH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50048000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:26 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000006c0)=r2) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5004c000e4800ef38bf461e59d7", 0x39}], 0x1) [ 842.410823][T12589] QAT: Invalid ioctl 14:16:27 executing program 3 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:27 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x44000, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xffc00}], 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) syz_open_dev$loop(&(0x7f0000001400)='/dev/loop#\x00', 0xc, 0x100082) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000780)={0x0, 0xc94}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000a00)={r5, 0x55de7672}, 0x8) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000006c0)) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000700)=""/36, &(0x7f0000000740)=0x24) flistxattr(r6, &(0x7f0000000a40)=""/85, 0x55) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) 14:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f56558000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:27 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50060000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 842.697819][T12640] QAT: Invalid ioctl [ 842.771052][T12669] QAT: Invalid ioctl 14:16:27 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x91D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x2, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:27 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xadH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f55865000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:27 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:27 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000003000000c8b8544c0008000080000000a8000000000000000700000000000000001c000000000080000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000100000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000a0008000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c910052bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac694979543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868dbc0da73af8e07b32dd61032ed240fd8478c13f438c569cf7cad50edd2d29f83fc16191d2151583b499867f501e843be2cb8d759cc293e3f7ca1fe680934a296032c83cb9a32dc0739346302197c489877e6d701846573db77767f19519d9a542f47dbdb21139ed9cfd897fe97987ebfc5b1ed60ac71ca91841842270b84213"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x541b, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50068000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:27 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x46c, 0x258, 0x258, 0x0, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000700), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x20}, @empty, @rand_addr=0x7fff, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@multicast2, @multicast1, 0xffffff00, 0xffffffff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x81, 0x3, 0x8, 0x6, 0x6, 0x3ff, 'netdevsim0\x00', 'veth1\x00', {0xff}, {0xff}}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe63c, 0x7fffffff}}}, {{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "99b5a74066bc5aa9c713e11902794b57a50ea1aca96f92ce9172da0b1a9e"}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x4b8) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000740)=[0x7f, 0x40]) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f00000006c0)) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5421, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5006c000e4800ef38bf461e59d7", 0x39}], 0x1) [ 843.442895][T13113] QAT: Invalid ioctl [ 843.506007][T13078] QAT: Invalid ioctl 14:16:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50074000e4800ef38bf461e59d7", 0x39}], 0x1) [ 843.528798][T13113] QAT: Invalid ioctl [ 843.544992][T13113] QAT: Invalid ioctl 14:16:28 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x92D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:28 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5450, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5007a000e4800ef38bf461e59d7", 0x39}], 0x1) [ 843.872379][T13277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:16:28 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600), 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:28 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xaeH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50081000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:28 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) seccomp(0x1, 0x1, &(0x7f0000000700)={0x2, &(0x7f00000006c0)=[{0x1, 0x8, 0x401, 0x7}, {0x100, 0x1000, 0x7, 0x7fff}]}) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESOCT=0x0], @ANYRESDEC=r0]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500f0000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:28 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600), 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5460, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 844.255509][T13500] validate_nla: 13 callbacks suppressed [ 844.255520][T13500] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:29 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x93D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:29 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xafH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000005b4800ef38bf461e59d7", 0x39}], 0x1) 14:16:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:29 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600), 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50002000e4800ef38bf461e59d7", 0x39}], 0x1) [ 844.868309][T13813] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:29 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0x0, 0x3, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000b00)={0x0, 0x1}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000b80)={r3, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x1000, 0x6, 0x9}, &(0x7f0000000c40)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="04042cbd7000ffdbdf25010000003c00030008000800dd0000000800040003000000080007004e22000008000400001000000800030002000000080007004e210000080007004e24000008000400ca0a00003000010008000b0073395eb108008371113f70755c697000080002002c000000080001000200000008000b00736970000c000700000000001800000048000100080008000000000008000200870000000c00070010000000200d00000800080008000000080004004e220000080005000300000008000900"], 0xd0}, 0x1, 0x0, 0x0, 0xc000}, 0x800) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000000c80), 0x2000012f, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x6f) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000006c0)) 14:16:29 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{0x0}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 844.986386][T13882] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50003000e4800ef38bf461e59d7", 0x39}], 0x1) [ 845.265991][T14134] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:29 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb0H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:29 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x94D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:29 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{0x0}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50004000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:30 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r1) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40049409, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 845.570350][T14251] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50005000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:30 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) write$P9_ROPEN(r0, &(0x7f00000006c0)={0x18, 0x71, 0x2, {{0x18, 0x1, 0x5}, 0x40}}, 0x18) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000a40)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xfffffffffffff5b0}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000ac0)={r6, 0x6}, 0x8) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7dc2f0ed}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r0, 0x0, 0x20000102000007) [ 845.765949][T14493] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50006000e4800ef38bf461e59d7", 0x39}], 0x1) [ 845.944377][T14609] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:30 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/467]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) syz_open_dev$sndtimer(&(0x7f0000000a80)='/dev/snd/timer\x00', 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000006c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf2504000000080006005079bde3f85c1100000082"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000740)=',*\x00'], &(0x7f0000000a40)=[&(0x7f00000007c0)='SEG6\x00', &(0x7f0000000a00)='SEG6\x00']) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x402c5828, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 846.195881][T14689] QAT: Invalid ioctl [ 846.370683][T14689] QAT: Invalid ioctl 14:16:31 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb1H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50007000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:31 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{0x0}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:31 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x95D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x402c582a, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 846.470595][T14808] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:31 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000006c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000700)={r3, 0x3}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000a000e4800ef38bf461e59d7", 0x39}], 0x1) [ 846.772937][T14881] QAT: Invalid ioctl [ 846.816929][T14874] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 846.866916][T14881] QAT: Invalid ioctl 14:16:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000c000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800454cf, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:31 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c4fa900", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f00000007c0)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000006c0)=""/246) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 847.116882][T15079] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 847.220265][T15103] QAT: Invalid ioctl 14:16:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000e000e4800ef38bf461e59d7", 0x39}], 0x1) [ 847.282026][T15208] QAT: Invalid ioctl 14:16:31 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) openat$audio(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/audio\x00', 0x800, 0x0) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:32 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb2H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:32 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x96D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:32 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5000f000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc020660b, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:32 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50010000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:32 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x97D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50048000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00?\x00'}) 14:16:32 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x1fe, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb3H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5004c000e4800ef38bf461e59d7", 0x39}], 0x1) [ 848.444176][T15946] QAT: Invalid ioctl 14:16:33 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50060000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00@\x00'}) 14:16:33 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x98D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50068000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x01\x00'}) 14:16:33 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5006c000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50074000e4800ef38bf461e59d7", 0x39}], 0x1) [ 849.273636][T16490] QAT: Invalid ioctl 14:16:33 executing program 2: r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000006c0)=0xfa, 0x4) pipe(0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) recvmsg(r0, &(0x7f0000001200)={&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f00000007c0)=""/193, 0xc1}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/171, 0xab}, {&(0x7f00000009c0)=""/31, 0x1f}, {&(0x7f0000000d40)=""/69, 0x45}, {&(0x7f0000000dc0)=""/221, 0xdd}, {&(0x7f0000000ec0)=""/173, 0xad}, {&(0x7f0000000f80)=""/196, 0xc4}, {&(0x7f0000001080)=""/50, 0x32}], 0xa, &(0x7f0000001140)=""/134, 0x86}, 0x60) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r1, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000700)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000001240), &(0x7f0000001280)=0x4) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb4H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:33 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e", 0x6a}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00?\x00'}) 14:16:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f5007a000e4800ef38bf461e59d7", 0x39}], 0x1) [ 849.371622][T16527] validate_nla: 9 callbacks suppressed [ 849.371634][T16527] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500f0000e4800ef38bf461e59d7", 0x39}], 0x1) [ 849.665176][T16687] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:34 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x99D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00@\x00'}) 14:16:34 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) accept4$vsock_stream(r2, &(0x7f0000000140), 0x10, 0x80000) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x5) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) lsetxattr$security_selinux(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='security.selinux\x00', &(0x7f0000000740)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000102000007) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000780)) 14:16:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000030e4800ef38bf461e59d7", 0x39}], 0x1) [ 850.101495][T16747] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:34 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e", 0x6a}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000050e4800ef38bf461e59d7", 0x39}], 0x1) [ 850.225553][T16751] QAT: Invalid ioctl 14:16:34 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb5H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 850.296750][T16853] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:34 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000700)=0x5, 0x4) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ioctl$RTC_PLL_SET(r2, 0x401c7012, &(0x7f00000006c0)={0x101, 0xe000000000000000, 0x3, 0x1, 0xfffffffffffffc01, 0x2, 0xfffffffffffffffc}) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000060e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) [ 850.508111][T16995] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 850.556864][T16970] QAT: Invalid ioctl 14:16:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000070e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:35 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb6H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 850.656895][T17186] QAT: Invalid ioctl 14:16:35 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x9aD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:35 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000904db6bab25233cd028b0227ac1354bbbe547845ff4ac78f4d9f6e69fcfb44c3e74d1b08b153842604fbecb60dff6cf8aa77227a08f02fe492fdb1c145a14e55375a391f211894a25ca4135d7ba3c5af61f72cd9efe7538e7653be2deb6c06d598ff84d70f7c50999d2a069adf437d20f23dad87fda617d9df6ccfc52307e4bf1a53ced794b941ea8945382c9b88a22ceb98fe2d92bbfebc2855b5a96d6697914b977a217fe5f804dee84d0b2855d7c7d96e88e1428062819934bab5c572e6ea82e291864b0820daa3f58629d8f7af3a", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) semget(0x1, 0x7, 0x408) 14:16:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00?\x00'}) [ 850.878707][T17192] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000a0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:35 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) migrate_pages(r3, 0x3, &(0x7f0000000700)=0x5, &(0x7f0000000740)=0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:35 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e", 0x6a}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:35 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb7H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00@\x00'}) [ 851.098816][T17390] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000c0e4800ef38bf461e59d7", 0x39}], 0x1) [ 851.332021][T17557] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:35 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355", 0x9f}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000e0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) [ 851.565026][T17737] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:36 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x9bD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb8H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:36 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355", 0x9f}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000f0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00?\x00'}) [ 851.837089][T17861] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000200e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:36 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355", 0x9f}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:36 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1aae92785cbadf6d5759c7de6c4f671dd3691f62408b61d7893abb06ec5cd73feb4b3aef41763767ddb420229732fe1cb06f0e4fe01f6a87e58b7c8ab901ea8f74ea26f841b50baa151d3ff7720a38676c4bf9c83edc1cfe6a7216d48765fcc871d697050bc81115484faed9496a1bf42150d774d308f579bd1b3c09f00d7125", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00@\x00'}) 14:16:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50043400e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb9H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50040430e4800ef38bf461e59d7", 0x39}], 0x1) [ 852.271366][T18355] QAT: Invalid ioctl [ 852.461086][T18355] QAT: Invalid ioctl 14:16:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x01\x00'}) 14:16:37 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a", 0xb9}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbaH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000480e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:37 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x9cD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:37 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) write$FUSE_OPEN(r2, &(0x7f00000006c0)={0x20, 0x0, 0x5}, 0x20) r6 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(r6, 0x0, 0x0, &(0x7f0000000740)) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000700)={'ip6erspan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) close(r5) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500004c0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:37 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a", 0xb9}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00?\x00'}) 14:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50065580e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:37 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a", 0xb9}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:37 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000740)=0x4, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000600e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00@\x00'}) 14:16:37 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x9dD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbbH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50058650e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:37 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a", 0xc6}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000680e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:38 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a", 0xc6}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500006c0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbcH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:38 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000700)='\\eth0mime_type$%\x00\x8e\xceF\x93\xf7\xc3Pr\xf0\xb6\xde\x1f\x05u\xa7\xc1\xdc\x84\\[\x16\xfb\xc7\x8b\x88\xdf\xa1>\x02\xbc\xf7\x9eB\x89o\xab\xa4\xad\x16&(\xbf\x8b9M\t\x92aJ\xd3T\xb8g\b\xa3g\xe2\xcb\xfbD\xd7\xb1\xa5\xe2$^\xa37\x95\xfe\x06\xf8\x84g1\xd2\xa7\xd7\xd8\xadf\xd2\xfcw\xea\xf1\xbc\x90\t\xea\xb0^ q\xa4\x85\xa0\"\xd8\xa4\xd5d\xd1:\xf6m<\xaf.\x82\x8d\"\xf4s\xf0\x02\xac\xc5\x1d\vO\xcb\xb0\xdd\x01\xa5P^E\xd1c', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:38 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x9eD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000740e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:38 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a", 0xc6}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500007a0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbdH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000810e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:38 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = semget(0xffffffffffffffff, 0x2, 0x400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(r2, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000f00e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) 14:16:39 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) readahead(r4, 0x2, 0x5) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 854.498739][T20035] validate_nla: 13 callbacks suppressed [ 854.498749][T20035] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:39 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x9fD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:39 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b6502", 0xcd}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00?\x00'}) 14:16:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000020e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:39 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbeH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:39 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b6502", 0xcd}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000030e4800ef38bf461e59d7", 0x39}], 0x1) [ 854.934792][T20162] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000040e4800ef38bf461e59d7", 0x39}], 0x1) [ 855.000300][T20308] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:39 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b6502", 0xcd}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 855.069491][T20374] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:39 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="06042cdf250400000008000600"/22], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000050e4800ef38bf461e59d7", 0x39}], 0x1) [ 855.306847][T20484] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbfH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:40 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa0D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00@\x00'}) 14:16:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000060e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:40 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) write$P9_RMKNOD(r0, &(0x7f0000000700)={0x14, 0x13, 0x1, {0x2, 0x4, 0x1}}, 0x14) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x203ffc, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000780)={0x0, 0x0, {0x3, 0x7, 0x2, 0xbd16}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0616340dc346c6e1f5000165ecd2be5fc15b76c6fa419cc3697e38cfcca9b1a64a72bce64acfb0cf3b5833"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000740)) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f00000006c0)={0x18, 0xfffffffffffffffe, 0x2, {0x3}}, 0x18) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x01\x00'}) [ 855.658312][T20498] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000070e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000a0e4800ef38bf461e59d7", 0x39}], 0x1) [ 855.889388][T20542] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:40 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x8) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) symlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$BLKGETSIZE64(r2, 0x80041272, &(0x7f0000000740)) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 855.979053][T20719] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:40 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c", 0xd0}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00?\x00'}) 14:16:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc0H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000c0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:40 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa1D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 856.154426][T20724] QAT: Invalid ioctl [ 856.295175][T20826] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00@\x00'}) 14:16:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000e0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:41 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c", 0xd0}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 856.405359][T21026] QAT: Invalid ioctl [ 856.507147][T21202] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:41 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) ioctl$TIOCCBRK(r2, 0x5428) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000006c0)={{0x5, 0xeb, 0x7, 0xc61a, 0x40}, 0x8, 0x1, 0x81}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000480)=0x8000, 0x4) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500000f0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:41 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa2D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 856.682532][T21270] QAT: Invalid ioctl 14:16:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) [ 856.806638][T21270] QAT: Invalid ioctl 14:16:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000100e4800ef38bf461e59d7", 0x39}], 0x1) [ 856.864947][T21289] QAT: Invalid ioctl [ 856.936839][T21289] QAT: Invalid ioctl 14:16:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000480e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:41 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc1H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:41 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000006c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:41 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c", 0xd0}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500004c0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00'}) 14:16:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000600e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000680e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:42 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad", 0xd2}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:42 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc2H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:42 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) r6 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) ptrace$setregs(0xd, r6, 0xffffffffffff8e76, &(0x7f0000000740)="d77ff35b7aa33ea2c96fec9b8a621b208788f91e43a10b274d418a2e8127f5d073ad9d7122fbac351412f1eb7eb35c8cfc0979bd9dcde81b1ddc1146e029688c44fd71b531ff70cd35e6466585225313670be19ed31007d4d51562738f5218c5edf462ddc65d9ef23b0c3f114d8ad6e664806448ff053686b2748a0f6af63d97fb8c81b3bfd00cabdd6b0984bab6aa9a2d42ff70290e2e22cb495d4e8f25e8e15c206c5e3fe09c905c63630e3eeb09b3554c9e8258822f1a25") write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000006c0)={0x43, 0x6, 0x0, {0x3, 0x4, 0x1a, 0x0, ']/GPL%\'\\!em0@trustedwlan1&'}}, 0x43) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000008) 14:16:42 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa3D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00?\x00'}) 14:16:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500006c0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00@\x00'}) 14:16:42 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7ff, 0x90}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000700)={r5, 0xffffffffffff65fa, 0x20, 0x80000001, 0x80000000, 0x80}, 0x14) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000102000007) 14:16:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000740e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f500007a0e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:42 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa4D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:42 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/btrfs-control\x00', 0x80001, 0x0) 14:16:43 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad", 0xd2}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x01\x00'}) 14:16:43 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc3H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:43 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2000000200002f, &(0x7f0000000a00)={0xa89b, {{0xa, 0x4e21, 0x20000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0xfffffffffffffffb}}}, 0xfffffdb6) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000006c0)) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000740)={0x6, 0x100, 0x905, {r7, r8+10000000}, 0x8}) sendfile(r5, r3, 0x0, 0xa) 14:16:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000005b4800ef38bf461e59d7", 0x39}], 0x1) 14:16:43 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa5D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000005b4800ef38bf461e59d7", 0x39}], 0x1) [ 858.723180][T22479] QAT: Invalid ioctl 14:16:43 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000ac0)='/dev/vbi#\x00', 0x2, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = semget(0xffffffffffffffff, 0x2, 0x400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f00000006c0)=0xfffffffffffffffd) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') getdents(r0, &(0x7f0000000b00)=""/155, 0x9b) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="06042cbd7004fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000700)={0x0, 0x10000}, &(0x7f0000000740)=0x8) syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0x40) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000080)={0xb, 0x8, 0x4, 0x4800, r0}) sendfile(r5, r6, 0x0, 0x20000102000007) [ 858.792196][T22607] QAT: Invalid ioctl 14:16:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e5b00ef38bf461e59d7", 0x39}], 0x1) 14:16:43 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad", 0xd2}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4802ef38bf461e59d7", 0x39}], 0x1) [ 859.007028][T22803] QAT: Invalid ioctl 14:16:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4803ef38bf461e59d7", 0x39}], 0x1) 14:16:43 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:44 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc4H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4804ef38bf461e59d7", 0x39}], 0x1) 14:16:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:44 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:44 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa6D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 859.521799][T23022] validate_nla: 14 callbacks suppressed [ 859.521811][T23022] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 859.867612][T23339] QAT: Invalid ioctl 14:16:44 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4805ef38bf461e59d7", 0x39}], 0x1) 14:16:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 14:16:44 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc5H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:44 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000006c0)={0x7, {{0xa, 0x400004e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x104) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xa7, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r3, 0x328, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000340)) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:44 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa7D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 860.040290][T23348] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4806ef38bf461e59d7", 0x39}], 0x1) [ 860.364065][T23513] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:45 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) write$UHID_INPUT2(r2, &(0x7f0000001640)={0xc, 0x1000, "b70c4200d93292ad59c926c518b34ccb7c96c1f9884d2651356002e50f848e8f18d92da00e4e458171cad0dd64e0bd516d51fe12eda703313953b244524ff0036cb3780641e3b61c29fdecfb3cb1d24237f97a9ec8189764c83a72cada42ff28de9af28cc54e576ea92a220250685c2fd83a7fee274026bf86a6e732e509292a869c98bcecfbe13ab76307e93b9694598a0ad7a34867e32a1d7d28e5d1a6ba3681d4de01a2d01ab2c46ab6615ee5afc1ddcd188d905f24cd8787eb69adf8838c0fd54356a91bf4b0ff7c9c15a4fbfd91d47d9d62beae4f1dd5a667fc08223975ebffc418ad63160290cb352374712fbcef04b249303558b777a2873d7429c7398a437b103dfdeb4c04f09c5380e107638611653d0125e2e4ef283ec8c5de1d3d60b721b2a164ee33239c1899c64423187e7fcb386089f73e98dde1c2afc0d561e8f9daa2b1d38ab6d4e901c20c2333c69e7fa806274c401ca7c2264ab8e782302a4d941a1a25ac9d6ebf4f640f8b407222a591183d775410823be481a61ab31bc7e43dcfc1698a9b6dae05bf55d21c9fbe0601600deeb5c5f717c031bce447181b8fd27ba10178e8463302cfd40ffc480b103c733e803f0ca63d17ef4b2d04ae8ee13a63f2c251adeb85edb907db7cb6a31cb4a98a21e4ce39a5c16e5bc64c36e0f940140cb3d96199af67a1e70d71ddb7a848a8abce64d5776c406fac5e13ca6637b8e3e37c02917c3712943abb78902462c65dc3ebbebd50e440efa23ad73838b18da59e14a76bf08880e3953b1f11043b435e6028e193d6c8efa2f31be1355cec84e06460a4cd174ec0f3b12b10025c0798fbebededdcde179a2e5bff9bebd3e17f8239baf99ae5cd873ffd04b3ffc6eb461d684076e1fe71a55ee99e1b584c4f45a06782f8c5db52194961636b216dc5f72b76c59bc4ef1ff2580f45d68953370c4343c30bdfc3e312fde28f277f11952e9a9338654122b9fedd11d438dae2fe9d01c295efe836c83f6857a75cdce90dd062a41881d853d3b7d3c2310502533bd8a1a56c5c9c32408ffc05ef1fd740b89c897befddf6dec1943948a244f3b195a9ea78c681283f2dcd9f545b20f1977ec54843074a8a1868a0bf8cbd48876667b87078b79bbe39edfae4eba0cbacb6d6144b54ed327c1158858906cfb10b11c854f0c1772b715f0bec631422d8d13a0f36b416bd181b6f9f8c341c78659b45d718d5f9d639f1cc7a6b1b0f636222fd391e81a81b9ee8c224964d1d1a4213b6e79ee88157739a7d160b6ba30cb79ad81788a6295ec190a3bd15c80937c4531a4768a8fe017b70adf0e2ff7b430c7508fb3d338f84e0b3a2e92dcbe465c052cca6b048bf40d6d301711d0e6952465b7f7417da7916a671241b4ae5830ac324c126dd91cc2eb3ef8659920da6dfd0c408549ce58f5b3153b4f2724ce14d083b6713343d8af4d8232ae190694944eb5004ee08e86bb8d22765571c19cc580aaed2d2e2b70a95b535100621a89b0974eba41b1143915d86d463fb5c55ab37d6aca6f7ea20fe2d4fcb2c79f96d9677ad68b35a7100bf264ca2de9f7b98c227ec3e08f2f21a31194e95528233c6f094098afd0c35dcc0b7948ad60d6a0d56e79b9bd38adebd954f878f7142072c893c2c464ff946fe1162ea49626cb9fe87844213875df8ed07ce2cd9df63b0c6f41939205bb2425396ecdd5a88471e3efe172edf56887e77ed891ec6802a282ad09764873d13c318893521d444a7d007ad84ab93aac5147e5d71db81c43d64ac48ee2b30eab851535767f2a20f79b1a2537d6823fb1598e0a99b3af436c7f054db09cc19d096adc876ef36fadd29bea23e811fcd4ea1f0cb7e5aa009f0a4c074c02935f3bca23486cf8c6d0908c7dae4daa00bc7277cbcb6afedfab815f3f86145ca0f176542816610db242e8cc0b2420fdb6b5efe5d45eac6404e8cd0ab3fcff4e21984bccd3a36227ba367fef342c083381c70f2b67cae945b76cd77d0f255ae21945271e7d632abc7cb98e8f7cb0dfb3a483e0ea3ea08763cd449554fd0cd205f557c22bd120faa1fe99c786c97cc3f59b57ef874883b2ad0ddaad4f3632da161392b18750926938c71e1ea1778464512ab1b6edcfb4470fcd09eeb4f127313641e83ab336c3edd1f027e3ed9066de30d42467852615055d2d89f93f1782ce55ff2711f39482865894eddde6492d5ba9c5b99bf81de6c084cc3386cfb3727f484dc9e42657c69e124cbc5243b89437f844df719993400b4837bf4629bd480c3aa65141cc4614c11e040aeab873fd9ae4d05772a9a800b5be8ff4e101d2afb86fa2b6f4d0645b0a29967b4e3edc50c28fe91eb569f8545cbd7b0b36d209cddc9f724c08b03f90d0b1a30dac8d4259d8d84ce3a495b08d460fa92f712e1646285a8a3fb9880a3a92ec2deb3e9d0e792f50d9e5e6e15d84328f9b43c1eab32886149e4b38a2d5048f3be5ab3b73f01b9153dfc0db6f7329e751a1ce323f14301827258fa15b5db0ca75a46330ba54e99f75577a6e0a320730d09f8e1e2eea0fa871c2d9ef9baa5f83c322c60e7b12f7743133f49f99db036b1834fcf08078f636d1e2399ac839a68a2292008df3c02e4ac9f18876457e4dadbbca5900388e7d232aab438af6bed8b68a6268b6d133d28fd2bce6029b4a40be74cd577759bdc1be37b67d60dd862f6fb91e3dc78cebf687da5c879113dd1c30a43a25859a36186365ef24e8e8b2554d238e1b97b4704767ed5bf4b3c48baa9fa05d346cdc1356a679d9c337ccac218b084291fb8c423743df107a158dd6a6aea7d4eaf5f29a0dc740e915a2ca94bfabecb60b230616cb6c17db9d66906dce4a4698cd283a994afdaa98f6ef58c2add6541b304daefff3f3ccbb0679d00bd51487ca49c82db736ef84dd19a63f3b3ca92f6a5704d79bbdf543d9b261281f5d0c819dc01544adfd1d87d3f58bf02c443c3236539e6804dd476183a9275a7c70a6472c80b57f1af1549ca23c3bad096c1f9dd3be46909f6cadf75f12c8a11bb425e4046b97ce63f2387f09dee9972dd0994362ab3db087096b73e142758ec456b43beca50d7aff6b4ed59440adf8ea7b3e7d608c693e3e7e00a84550be8c28cd9d74e2d435450c8c721e3e9db0f9e94cc893bb47ece0d9be4b86d14c6cdfdd61d01afd3393de2bfaa6f686055a89e8e0c035131329d2435c8db06fae8f9b1ef17d26f7fced2cc3f35aee53e45da6314e8fed54355a7a9462234a9e3d9c9fd608ad8f838c5e63f5284e8e0c649e741a9eb14272f8e6c6a6d687c96ac40b03c36dbc44633c41c80021c2838f0265463cae98f23cd94405503f50ed58bf550f1a1395ee006882b2a82d046ce12504751b36f65aba5d4b1a68aa76bc0700467da43a3cbf2bf1dd20a047de70d13ebe73009f7758ba12d6bac5d8336c739968c4aa98e8de40532ba6a6cdeb5dbd8c0aaf254e79563c7a98cd994a25405e1a862c46982708d660b4e7ab5198bbfbc0577d54ef480fed99a569278c6f3f0441390b4aa7c195fb22a1aab287e5f1f43219f30f4d2afe48c4b08fd4b3c5037e272927a61984fa5aa8ad5feaa6b26cd5488731f06c14fb329fa16d642bd0a6d307a8d940c0feed11c1116dc14aebfd0dc60a48c16110f0118f1890ab38f75f0811f2751ac936962d68eb70c46e2770ef1d9e9fc36f5a725f963268837c39ae20f592d30476f521bf6513dd505de9e9e4380817acf067a11e5e1772a69be9bf736b05005a2fcec0a4727af241483f53d5bd4f71aa5d69971620d978ee958ba8334266ddd00d211528df5784b7d3601761ff999508e6db2f21decb2083fe2f6ef6d4e6772fdb95a5e6f1e9b3cefdd6d77c89c79f8866360ab71d0144545958e7dec46163318ac35c6b7558196b500b690dedd866dbd3eb243138e328b41e0bd74469c0de49c3791793464fbfeb138969442c2003a2d496f586c3d6dbcdfb4ef7cd93c4b00f9de0f7df67d4ade9d63a1f44940192260964aa250eb1eb1c1cc1bd397aa5e7ba917c0e33b55d349b523f8d6452abdb55eafe59b9574b2ecd522e972f6eb8ad813096526f3cb2f65bee6a8d827e9bd4118464596709dfb84f7398882770d7de205a8ffb3d6cc20c9af529f62401df2faf0b7231b98b4921d8c911aa17d0c102ef56a1ccc367f8e9aaa1291aba9888a38c690f5dfe6cd4b7c408c0c8c6b70ea3a8aec4eb97b491634d885b00940b59f1be16264003220c426e45a9ede7c3077bc9b51551fc944da18c22ca3a268d376202b8e38d6f42302df1aecc7f0266a2830fc4b23b875cdf89e69f7bc9534f08e62cc319b5823c13e90a0053d773da58669bd9dd7d563bbb823d66b74ac81501299f579dce8184d10c3a49153e508d9f4c39f7af5fdcc6a96472f21eb5ff536db524d59fc4d2e43521f85055bdb48d8a41f4eae5590256b725d58fcf03dfa6a0a919963bc8e210aa27123c854d953b57ec951061862a7867a0f32b70a64e31c9994f315aa18a460d6d45925422081686f9e8e5a1afaaa4fc1d900049f0c7a660847249c8f16305c08c55d44f4a005d6b8d2a818abec3124a3505adf2a500cedeaba4005fe339af37380f3737de7b990ba4218cd6cab28e145d9aad997fab2744a1d9335c3b82c61d2c3717dafd7c9d5b177f23ce0c5cc6c6e7f161b62e7e9bfbbb79dae3e40a428d637805fe72ae49c628c1b268f0b77befe2d6d0d7d0614b69d0ccc1d4948a57800fdb964e860f297832b462a40943e99e3c5c35b2132c38e47b20252bd088cfff5d827ec9532fb031a7789ded331b1294103571c9a9d9d4912d268bd06c1cd932852124878c97a466a046fa9e0b30c6be83fd5c4bd9d196dd8df609ca8694dc5383cdb4d8ba10f419743abb4f8e56d78a98cf752fb884a3f1ece4d74f5af6e5d3c96fbe97695f7053f1b5089c383e15fc1c6ac061d1c8ac218d119edae1c8a2ca89b8ae262a25d8acff06240b9d500bbbd22d292d5be04ab8aabf93ce90560baffd16bc47a1506c3a24087af02f937bafb7dd60328595f530e7707e81cc79317e9af0b22a8ce57d4f946a3eb68b989bb5daebd316927df83b844ef7f27c22c3ce5e2880cebf9368b73395e223c128d7f91c3295c07513469b8aeb97e0135b74078feb28b4b489decbf43fd250a33d6849d5fcfe382ca228a65e6a92536f6f2efb9e2099594d84323b3cf6f3f936a7d85b7febd86f4fa1a8de05f7d4c91f8001c2f8dd129aac5770d307759569975d3e30c675dc6ad80d7eb94e59ca7012629c0972f91522d4460ef5e6c7ca3041a1ae1ba9493eb2771000297d97f0c18e48d83d1e48e00e070d2088c69d7315056a3043bda52944745bef71ec2050c585e35d790174715b35726744a1805133793542193ffd60ad1f57b0e0bc7dc16c632553f8059c2cba42d2f1825b690b3d44deb3667438e3672b5bb428e3a4ba21f03acfd3b51213b1822b79ac6d1115c2b4fa371158fbb20079e6d81a8066f21da69745f430340d934d026e5e1aaeb9944cea226c08e191573340858a35cf23b66af5cacbc1ebeb60d66678516800d3930aeb5f11d27ef869ca88fe03080ecb98838e37d837063a6e7e7929eb8268abee1d092e4e2f3e8f25c6e54bec033ca165f2574c9bc3454f3f9a884f2621dc36fd8b3506ac4ef4b2bf0ca8e73c1c62a8365d2ae4234ccdc0cb5a1b86a0607825fc0255076c3a7a94c9df9ddaae7ec05809b9d1bdb401628dd355787563bca76fdf2c6d7df638869439dfe964442978cfac2a6f191b88fe84da0c8fbbb"}, 0x1006) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4807ef38bf461e59d7", 0x39}], 0x1) 14:16:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc6H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:45 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa8D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 860.700425][T23675] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:45 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, 0x8c, "f499100ae2947e343bf95a1302bd59d54a35aa12288b18d7bd1c33e9d80c42fa66cba30a4dcd84df0333ee41423106bdeee2586540f153d106d02f98ca84531458c0417f0394d0541115070e2240429ff66f8128429eddd55e0d421b3bd87178241b866f0ef4db9688fdeef4b1be3b9015dd88ab254b7a0fbfa0cb9295a9686984272b63fb942d404fb9367c"}, 0x92) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000006c0)={0x8001, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x2a}, 0x6c}}, {{0xa, 0x4e23, 0x2, @mcast1, 0xfffffffffffffffd}}}, 0x104) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xffffffffffffff53, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2f, 0x425dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = syz_open_dev$radio(&(0x7f0000000ac0)='/dev/radio#\x00', 0x0, 0x2) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) sendfile(r4, r6, 0x0, 0x20000102000007) 14:16:45 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'}) 14:16:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e480aef38bf461e59d7", 0x39}], 0x1) [ 860.995699][T23835] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc7H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e480cef38bf461e59d7", 0x39}], 0x1) 14:16:45 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}) [ 861.271965][T24001] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:45 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa9D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e480eef38bf461e59d7", 0x39}], 0x1) 14:16:46 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 861.534095][T24215] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e480fef38bf461e59d7", 0x39}], 0x1) [ 861.746226][T24221] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:46 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff'}) 14:16:46 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:46 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc8H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4810ef38bf461e59d7", 0x39}], 0x1) [ 861.849739][T24311] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4848ef38bf461e59d7", 0x39}], 0x1) 14:16:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00?\x00'}) 14:16:46 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 861.953003][T24438] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:46 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xaaD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e484cef38bf461e59d7", 0x39}], 0x1) 14:16:46 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00@\x00'}) 14:16:47 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4860ef38bf461e59d7", 0x39}], 0x1) 14:16:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 14:16:47 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xabD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:47 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="65d3000096bfd099fca9f1684352fd70f5f9bf84a6e24731", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r4, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc9H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4868ef38bf461e59d7", 0x39}], 0x1) 14:16:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e486cef38bf461e59d7", 0x39}], 0x1) 14:16:47 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000000)={0xd, 0x4}) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000006c0), &(0x7f0000000700)=0x4) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r2, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:47 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:47 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xacD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4874ef38bf461e59d7", 0x39}], 0x1) 14:16:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcaH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00@\x00'}) [ 863.441854][T25396] QAT: Invalid ioctl 14:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e487aef38bf461e59d7", 0x39}], 0x1) 14:16:48 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, 0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef0abf461e59d7", 0x39}], 0x1) 14:16:48 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000007) 14:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef5bbf461e59d7", 0x39}], 0x1) 14:16:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 864.051945][T25407] QAT: Invalid ioctl 14:16:48 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$vhci(r2, &(0x7f0000000b00)=@HCI_EVENT_PKT={0x4, "1b8578ba78eee783a5ee341584524194ae242f0ccf561d3fb272aa2c036b6bda128c5330c49db94df9bba9c35ace0bf6bdda7b6089084ba9cb159ee869a085413f4c8e5f081507a95a13b06191b8fc627b3ce01d357dc8b687fcc544eb24dbe79e32bdd9adb9f47b628d6c7db6f08e8cf237abe1ca785dea33568a851f827a33458a730fad6fa31249ec3e0997b50fbdd90b2c960bbed4f1279e2915e1d61609ab3fdbd7b99ea5027e4c6d011b3f716376b4f112abb9db22e9eb4ed1d948e8d8dc5427d55c895df9cc3f9a21d04417a115bc4c48be17b88ddc2fd667b3f57c50da572dcba1"}, 0xe6) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) kexec_load(0x2, 0x4, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="7ec5fc4adcfd160bc0fbca8eb6b053167eebb9955f535f1b88426bc13f21959c4abe8dbd7145f045b850efb0ef603de2810f1e1328446b506a1a40cf92b690676718d4f4bb952fac6459b7a5ae46a088a30f8e5709e3bc5964e037cef5f587b8f120c2261c79d6859ac1a1d7707c61c8756e4ef2b1ccd8b17bf9ae16cf80d318e3", 0x81, 0x80000000, 0x7fff}, {&(0x7f0000000a00)="cbd45e00e010d557ed2c61e9d053a183dbf9f2e0423a865eab57377b13d89042a96b61c908d829db9b3d5a0c20a99c4fb38133bf84d91592eb775d74732c6cb1a79926ccb9ba01f13292c2074f9a83ebfe69cd860f045c56f983c1df2a864c05c5648a72bc167979878c520e7f6c8e75d987c2cf1832301a4542667a652ae42a0ca3f2ad664ad5b4513da03adf5b79f2fb28821c41aa3e4cb8f098b7d08df1f99e6e352dcb0982db2e20ad919e", 0xad, 0x0, 0x2}, {&(0x7f0000001640)="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", 0x1000, 0x4, 0x4}, {&(0x7f0000000780)="482ac3012f71fa9c32c5c00371df98caad1714e47a7c76a2431f21cd2fabfc74963a40ea6f465ab78b208b03d8fdd8688b5930f941f888108cf5082f143431e7ac7dcc98025cf1d3c393a6", 0x4b, 0x1f, 0xe63d}], 0x3e0001) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) syz_open_dev$loop(&(0x7f0000000c00)='/dev/loop#\x00', 0x1, 0x1a1280) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf5b1e59d7", 0x39}], 0x1) 14:16:48 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xadD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:48 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcbH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:48 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000007) 14:16:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf601e59d7", 0x39}], 0x1) 14:16:48 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000007) 14:16:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf465b59d7", 0x39}], 0x1) [ 864.680576][T26175] validate_nla: 11 callbacks suppressed [ 864.680587][T26175] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e5bd7", 0x39}], 0x1) 14:16:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 865.090853][T26458] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:49 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xccH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:50 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000006c0)=0x2, 0x4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000700)=0x9, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0xa}], 0x1) 14:16:50 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000102000007) 14:16:50 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xaeD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff'}) 14:16:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0xf}], 0x1) 14:16:50 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000102000007) 14:16:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x10}], 0x1) 14:16:50 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000102000007) 14:16:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:50 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcdH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x3c}], 0x1) [ 866.032827][T26958] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x5b}], 0x1) 14:16:50 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x0) 14:16:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:50 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xafD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:50 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) r3 = dup3(r0, r1, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$PPPOEIOCSFWD(r3, 0x4004b100, &(0x7f0000000300)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gre0\x00'}}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="06042cbd7000fcdbdf25040000000800060004000000253fedf69d2bedacb70a96b77f0500000075cdcca5633d"], 0x1c}}, 0x4004) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000006c0)) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x101, 0x800) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000007) 14:16:50 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xceH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 866.395473][T27121] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0xc0}], 0x1) 14:16:51 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x0) 14:16:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) [ 866.563922][T27257] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0xec0}], 0x1) 14:16:51 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000006c0)=0x2, 0x8) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0xfdef}], 0x1) [ 866.695547][T27450] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:51 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb0D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:51 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcfH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 866.737368][T27547] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x33fe0}], 0x1) 14:16:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x20000279}], 0x1) 14:16:51 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="06042cbd7000fcdbdf250400000d070006000000000060d73c96646a1f3a27106c4638c97eb7b6c6d0f00bf60af4fc25824bc4f2fc2a220200dbe57b5094d367ebe7f5446d4dbf68b70ef73da36d077a6adc91c9ce9d4b58618d50b6f38b7360f206b1c052d9133580240c3ddb4e934f5ad352ee64c9aa625e07a51aab957f53d5582ee3ea0e334777d5b41e418ec8ed7f"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 866.943638][T27658] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x7ffff000}], 0x1) 14:16:51 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x0) 14:16:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:51 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000740)={&(0x7f0000ffd000/0x2000)=nil, 0x90, 0x3, 0x90, &(0x7f0000ffd000/0x2000)=nil, 0x3d}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000780)={&(0x7f0000000740), 0x0, 0x36d, 0xfff, 0x0, 0x7fff, 0x5, {0x2, 0xfffffffffffffffb, 0x9, 0x0, 0x8, 0x0, 0x6, 0x1f, 0x7, 0x81, 0x100, 0xdb, 0x5bd, 0x5a, "328527e338016a8712185ba8b34e005e40956c664534fa7ae852eafb8dee3221"}}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:51 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd0H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0xfffffdef}], 0x1) [ 867.425160][T27911] QAT: Invalid ioctl [ 867.530051][T27911] QAT: Invalid ioctl 14:16:52 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb1D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x37}) 14:16:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0xfffffffffffffdef}], 0x1) 14:16:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff038aa174036ed7e08f93dd86dd60df806100052cf17b4cf775b88fae83b35adbc974dc5f2bfe80000000000000a2c8c1cf22741f260400200008"], 0x3b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 14:16:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x2) 14:16:52 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb2D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 868.005712][T28424] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:52 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd1H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 868.264195][T27988] QAT: Invalid ioctl [ 868.280472][T28617] QAT: Invalid ioctl 14:16:52 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000740)='/dev/vbi#\x00', 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="06042c040000fcdbdf25040000000800060000000000"], 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x1000000000000002) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x130, [0x20000180, 0x0, 0x0, 0x20000248, 0x200003e4], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bond_slave_1\x00', 'ifb0\x00', 'nlmon0\x00', 'veth0\x00', @random="254218a37b63", [], @broadcast, [], 0x70, 0x70, 0xa0}}, @arpreply={'arpreply\x00', 0xc, {{@random="ac8341adf87f"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x180) 14:16:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x3) 14:16:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:53 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 868.458068][T28675] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x8) 14:16:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xa2, 0x0}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000fc0)="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", 0x4da}], 0x1}, 0x0) 14:16:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x25) 14:16:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff'}) 14:16:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x5b) 14:16:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") r1 = socket$inet6(0xa, 0x3, 0x4000000000000087) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)=@ethernet, 0x80, &(0x7f0000000740)=[{&(0x7f0000000080)="201d733e", 0x4}], 0x1}}], 0x1, 0x0) 14:16:53 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb3D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd2H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x300) 14:16:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:53 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) write$FUSE_GETXATTR(r0, &(0x7f0000000700)={0x18, 0x0, 0x3, {0x9c8c}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) bind$isdn_base(r1, &(0x7f0000000740)={0x22, 0x1, 0x9, 0x5, 0x20}, 0x6) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000006c0)=@req={0x81, 0xd01d, 0x7fffffff, 0x1}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x7ffffff2) 14:16:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcfH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x7ffffff8) 14:16:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x7ffffff9) 14:16:53 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e21, 0x806, @dev={0xfe, 0x80, [], 0x15}, 0x6}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0xffffff1f) 14:16:54 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb4D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:54 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd3H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}) 14:16:54 executing program 0: socket$netlink(0x10, 0x3, 0x0) 14:16:54 executing program 0: r0 = semget$private(0x0, 0x1, 0x40) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000000)=""/2) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:54 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) sendfile64(r0, r1, &(0x7f0000000080), 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcfH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) [ 870.241332][T29948] validate_nla: 2 callbacks suppressed [ 870.241344][T29948] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:54 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd4H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:54 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) r3 = dup3(r0, r1, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$PPPOEIOCSFWD(r3, 0x4004b100, &(0x7f0000000300)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gre0\x00'}}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="06042cbd7000fcdbdf25040000000800060004000000253fedf69d2bedacb70a96b77f0500000075cdcca5633d"], 0x1c}}, 0x4004) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000006c0)) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x101, 0x800) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000007) 14:16:55 executing program 0: socket$netlink(0x10, 0x3, 0x0) 14:16:55 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdd}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) 14:16:55 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb5D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:55 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) r3 = dup3(r0, r1, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') ioctl$PPPOEIOCSFWD(r3, 0x4004b100, &(0x7f0000000300)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gre0\x00'}}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="06042cbd7000fcdbdf25040000000800060004000000253fedf69d2bedacb70a96b77f0500000075cdcca5633d"], 0x1c}}, 0x4004) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000006c0)) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x101, 0x800) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000102000007) 14:16:55 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="d0d2fc776e56076b86569d9832beedb59a54a025753f38f8e07bf83fef39aa09371b6932191aa3bec5f9299e7e85aaff4f0bc1219c99c1348d84484fca870f2663318f4560ee9d3112eba5ca190bd8a257be3ac4dda146aab2e801e2b609010890b7d733d832b5d959d1f7497e0ed116603e25b93f85b40250224fa9d902d552171cf78a", 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 870.759086][T30660] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:55 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcbH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:55 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400080, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0xb1a, 0x1, 0x8b03}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xcfH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:55 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd5H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) [ 871.060024][T30950] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x40000000009) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) clock_settime(0x1, &(0x7f0000000000)) 14:16:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:55 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb6D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:56 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd6H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:56 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:56 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc3H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:56 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=""/235, 0xeb, 0xffffffffffffffff}}, 0x10) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/228, 0xe4}], 0x5, &(0x7f0000000600)=""/4, 0x4}, 0x1}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/117, 0x75}], 0x1}, 0x5}, {{&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/35, 0x23}, {&(0x7f0000001880)=""/131, 0x83}], 0x4, &(0x7f0000001980)=""/158, 0x9e}, 0xffffffffffffff33}, {{&(0x7f0000001a40)=@caif, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001ac0)=""/245, 0xf5}, {&(0x7f0000001bc0)=""/187, 0xbb}, {&(0x7f0000001c80)=""/47, 0x2f}, {&(0x7f0000001cc0)=""/193, 0xc1}, {&(0x7f0000001dc0)=""/160, 0xa0}, {&(0x7f0000001e80)=""/107, 0x6b}, {&(0x7f0000001f00)=""/4096, 0x1000}], 0x7, &(0x7f0000002f40)=""/11, 0xb}, 0x2}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002f80)=""/198, 0xc6}, {&(0x7f0000003080)=""/177, 0xb1}, {&(0x7f0000003140)=""/12, 0xc}, {&(0x7f0000003180)=""/157, 0x9d}, {&(0x7f0000003240)=""/147, 0x93}, {&(0x7f0000003300)=""/25, 0x19}, {&(0x7f0000003340)=""/206, 0xce}, {&(0x7f0000003440)=""/217, 0xd9}, {&(0x7f0000003540)=""/4, 0x4}, {&(0x7f0000003580)=""/211, 0xd3}], 0xa, &(0x7f0000003700)}, 0x1}, {{&(0x7f0000003740)=@generic, 0x80, &(0x7f0000004b80)=[{&(0x7f00000037c0)=""/242, 0xf2}, {&(0x7f00000038c0)=""/55, 0x37}, {&(0x7f0000003900)=""/47, 0x2f}, {&(0x7f0000003940)=""/106, 0x6a}, {&(0x7f00000039c0)=""/30, 0x1e}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/158, 0x9e}, {&(0x7f0000004ac0)=""/190, 0xbe}], 0x8}, 0x2}, {{0xfffffffffffffffe, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004bc0)=""/186, 0xba}, {&(0x7f0000004c80)=""/164, 0xa4}, {&(0x7f0000004d40)=""/236, 0xec}], 0x3}, 0x9}, {{&(0x7f0000004e80)=@un=@abs, 0x80, &(0x7f0000004f00)=[{0xffffffffffffffff}], 0x1, &(0x7f0000004f40)=""/149, 0x95}, 0x5}], 0x8, 0xebfe9cf60578e243, &(0x7f0000005140)={r1, r2+10000000}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000005180)={0x0, 0x101, 0x30, 0x7, 0x4}, &(0x7f00000051c0)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000005200)={r4, 0xffffffffffffffff, 0x2, 0x5, 0xe8b5, 0x5}, 0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000280)={0x7e8, 0x4, 0x10001, 0x4, 0x100000000, 0x4399}) [ 871.705081][T31557] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000001c0)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) lsetxattr$security_capability(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0)='security.capability\x00', &(0x7f0000000700)=@v1={0x1000000, [{0x0, 0x69}]}, 0xc, 0x1) write$FUSE_ENTRY(r2, &(0x7f0000000440)={0x90, 0x0, 0x1, {0x3, 0x0, 0x0, 0x9, 0x8000, 0x3, {0x1, 0x9bc, 0x6, 0x1, 0x8, 0x5, 0x9, 0x4, 0xb, 0x1, 0x0, r3, r4, 0xffffffffffffffff, 0x1}}}, 0x90) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6bf3577edc427569, 0x3, "6862927e5f6e0ccdc2e29e1664f1b8354a9dde2b1717244bbb0dad477ec98e4a3e492cc07e2083d0e657d1f282ccaf83b185416dd63838f189"}, &(0x7f0000000140), 0x400) writev(r2, &(0x7f0000000500), 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000005c0)={@un=@abs={0x1, 0x0, 0x4e23}, {&(0x7f0000000500)=""/95, 0x5f}, &(0x7f0000000580), 0x14}, 0x9c) 14:16:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 871.912279][T31788] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:56 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd7H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:56 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xa2D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:56 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x17) r1 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000000c0)={0x3a, 0x30383653, 0xb08f, 0x100000001, 0x3, @discrete={0x0, 0x4}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:56 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb7D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xf4, r1, 0x100, 0x7ff, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x180}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x1708, 0x2) ioctl$TIOCCBRK(r2, 0x5428) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r3, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) setsockopt$inet_mreqsrc(r3, 0x0, 0xae7e1463ff3ccdd9, &(0x7f00000000c0)={@multicast1, @multicast2, @empty}, 0xc) 14:16:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff'}) 14:16:56 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd8H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:57 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000700)='\\eth0mime_type$%\x00\x8e\xceF\x93\xf7\xc3Pr\xf0\xb6\xde\x1f\x05u\xa7\xc1\xdc\x84\\[\x16\xfb\xc7\x8b\x88\xdf\xa1>\x02\xbc\xf7\x9eB\x89o\xab\xa4\xad\x16&(\xbf\x8b9M\t\x92aJ\xd3T\xb8g\b\xa3g\xe2\xcb\xfbD\xd7\xb1\xa5\xe2$^\xa37\x95\xfe\x06\xf8\x84g1\xd2\xa7\xd7\xd8\xadf\xd2\xfcw\xea\xf1\xbc\x90\t\xea\xb0^ q\xa4\x85\xa0\"\xd8\xa4\xd5d\xd1:\xf6m<\xaf.\x82\x8d\"\xf4s\xf0\x02\xac\xc5\x1d\vO\xcb\xb0\xdd\x01\xa5P^E\xd1c', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 872.708500][T32568] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:57 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xd9H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:57 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000740)=0x4, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d554fbb6a54b875a05dacdbe94647fd91c723173b76888c6e47b1df23ac8a868d"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb8D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:57 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x202000, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x600100, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000100)={0x1e, 0x37, 0x2, {0x2, 0xadf, 0x4, r1}}, 0x1e) write$P9_RREAD(r0, &(0x7f0000000140)={0xad, 0x75, 0x1, {0xa2, "5dccf4e045b966b1b64fa882e2f4538fe846e5ef0704b59930a4df7edf8178402899ef5de9216ccf99edcb882b3e3bf65399faec1178b51db855164899638f26b78636fb4fea8f7083087e65a592778a53a802f4f8084cab482674f6819cea8b088c20e186d4e0d468e2546a16f2bba784ae3887f521a754beb9fd60b7bb9fd19e69e92e774341678862b7c3e6b327d7478c55f3fdc3a45c8ee832bcbe18991dde23"}}, 0xad) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:16:57 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000700)='\\eth0mime_type$%\x00\x8e\xceF\x93\xf7\xc3Pr\xf0\xb6\xde\x1f\x05u\xa7\xc1\xdc\x84\\[\x16\xfb\xc7\x8b\x88\xdf\xa1>\x02\xbc\xf7\x9eB\x89o\xab\xa4\xad\x16&(\xbf\x8b9M\t\x92aJ\xd3T\xb8g\b\xa3g\xe2\xcb\xfbD\xd7\xb1\xa5\xe2$^\xa37\x95\xfe\x06\xf8\x84g1\xd2\xa7\xd7\xd8\xadf\xd2\xfcw\xea\xf1\xbc\x90\t\xea\xb0^ q\xa4\x85\xa0\"\xd8\xa4\xd5d\xd1:\xf6m<\xaf.\x82\x8d\"\xf4s\xf0\x02\xac\xc5\x1d\vO\xcb\xb0\xdd\x01\xa5P^E\xd1c', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) 14:16:57 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000700)='\\eth0mime_type$%\x00\x8e\xceF\x93\xf7\xc3Pr\xf0\xb6\xde\x1f\x05u\xa7\xc1\xdc\x84\\[\x16\xfb\xc7\x8b\x88\xdf\xa1>\x02\xbc\xf7\x9eB\x89o\xab\xa4\xad\x16&(\xbf\x8b9M\t\x92aJ\xd3T\xb8g\b\xa3g\xe2\xcb\xfbD\xd7\xb1\xa5\xe2$^\xa37\x95\xfe\x06\xf8\x84g1\xd2\xa7\xd7\xd8\xadf\xd2\xfcw\xea\xf1\xbc\x90\t\xea\xb0^ q\xa4\x85\xa0\"\xd8\xa4\xd5d\xd1:\xf6m<\xaf.\x82\x8d\"\xf4s\xf0\x02\xac\xc5\x1d\vO\xcb\xb0\xdd\x01\xa5P^E\xd1c', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 873.165482][ T370] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff'}) 14:16:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x200000fc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x4c000, 0x0) 14:16:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 14:16:58 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xdaH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:58 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xb9D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:58 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) migrate_pages(r3, 0x3, &(0x7f0000000700)=0x5, &(0x7f0000000740)=0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:58 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000740)=0x4, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 14:16:58 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x5, "9e5de2697ffd8e56f7f3289a0c65e3decbee13a68985b1ec6edfd08aed465a52", 0x0, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000000), 0x1c0) 14:16:58 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) migrate_pages(r3, 0x3, &(0x7f0000000700)=0x5, &(0x7f0000000740)=0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:58 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xdbH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f0000000000), 0x0) fcntl$setflags(r0, 0x2, 0x1) getuid() getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x101, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000100)=0x3) 14:16:58 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)={0x0, 0x0}) migrate_pages(r3, 0x3, &(0x7f0000000700)=0x5, &(0x7f0000000740)=0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:16:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'}) 14:16:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1b) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) fcntl$setstatus(r0, 0x4, 0x40000) r1 = dup2(r0, r0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) 14:16:58 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbaD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xdaH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syz_tun\x00', 0x3}, 0x18) syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x2) ioctl$VT_RELDISP(r1, 0x5605) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 874.707417][ T2012] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:16:59 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000740)=0x4, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:16:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}) 14:16:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040), 0x0) 14:16:59 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xdcH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:59 executing program 0: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a3f0d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10800, 0x0) fadvise64(r0, 0x0, 0x7f, 0x7) pipe2(&(0x7f0000000040), 0x7fffc) 14:16:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:16:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xdaH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:16:59 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbbD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:16:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000080)=""/241, 0xf1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:17:00 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e", 0x6a}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 875.440234][ T2672] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) socket$inet6_dccp(0xa, 0x6, 0x0) 14:17:00 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xddH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x95D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:00 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbcD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 875.822304][ T2981] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:00 executing program 0: setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10) write$smack_current(r1, &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x19) [ 876.017994][ T3312] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:17:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:00 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xdeH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x95D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:01 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xddH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc001, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000080)={0x6, 0x1, 0x0, [{0x5, 0x0, 0x0, 0x1, 0x4, 0xee1, 0x804}]}) 14:17:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}) [ 876.506810][ T3898] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 876.531488][ T3898] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:01 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)="7a0b7c9b6246c7bf59edf06c5adcacaa181110f8e22bbd2d4f5f5395d751b5bd990f3bbfb2302c583bb8e31594bd4a92821ce32b646347f6cc46fee96759898f306daf51cea56b75b079a88f7a9d6721601a90bd04cbf15af66ecd22bff5ea09b4d431e9141c9e63c4175a28492e84326e74e155") r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:17:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) [ 876.866606][ T4171] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:01 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbdD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:01 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xdfH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:01 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x95D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50002000e4800ef38bf461e59d7", 0x39}], 0x1) 14:17:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0x39}], 0x367) 14:17:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1f) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 877.270813][ T4394] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 877.283874][ T4394] bridge0: port 3(team_slave_1) entered blocking state [ 877.292711][ T4394] bridge0: port 3(team_slave_1) entered disabled state [ 877.302745][ T4394] device team_slave_1 entered promiscuous mode 14:17:01 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) seccomp(0x1, 0x1, &(0x7f0000000700)={0x2, &(0x7f00000006c0)=[{0x1, 0x8, 0x401, 0x7}, {0x100, 0x1000, 0x7, 0x7fff}]}) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESOCT=0x0], @ANYRESDEC=r0]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r4, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r6 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r6, 0x0, 0x20000102000007) 14:17:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2e00000004000000000000000000f140f18df8482c449311015f2e00000200ffe90001"], 0x2e) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', '-^system\x00'}, &(0x7f0000000100)='ppp0lo-bdev^\x00', 0xd, 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:17:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:02 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbeD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 877.474571][ T4763] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xaeH\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:02 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xe0H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x3fd, 0x0) writev(r0, &(0x7f0000000040), 0x0) 14:17:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x91D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:02 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xbfD\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6080, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0xf1, 0x4) 14:17:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 878.225277][ T5275] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x2, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:02 executing program 5 (fault-call:23 fault-nth:0): pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:17:02 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xe1H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1e) ioctl$sock_ifreq(r0, 0x47110229b050c0b5, &(0x7f0000000140)={'veth0_to_team\x00', @ifru_mtu=0x1}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000100)=[0x5, 0x4]) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000880)=""/135) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f0000000180)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x1a, 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x4208, r3) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000080)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) write$tun(r2, &(0x7f00000006c0)={@void, @void, @ipv4={{0x52, 0x4, 0x6, 0x0, 0x176, 0x64, 0x9, 0x5, 0x469a736fd22e511f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x4f, 0xff, [{0x6, 0xd, "46f6af4d144ab9a58a26eb"}, {0x7, 0x4, "6e90"}, {0x7, 0x7, "2ca53d2121"}, {0x1, 0x7, "e2c81ae583"}, {0x5, 0xd, "bda17b3e29301a3174cee6"}, {0x0, 0x5, "425503"}, {0x5, 0x9, "7613637bfa6d0d"}, {0x2, 0xf, "5ca166932155db33fc6e8d0adb"}]}, @cipso={0x86, 0x50, 0x4, [{0x1, 0x4, "7a04"}, {0x3, 0x2}, {0x0, 0xc, "d1cf3891fb80eb32d813"}, {0x1, 0x4, "8185"}, {0x1, 0x9, "781bca48147494"}, {0x0, 0x7, "1cf5f36644"}, {0x1, 0xb, "b295d0c8d9280b014c"}, {0x5, 0x7, "a51513d4c3"}, {0x6, 0xe, "2b1f8e96d63d27494205eee3"}, {0x0, 0x4, "a63b"}]}, @noop, @lsrr={0x83, 0x17, 0x3f, [@local, @loopback, @local, @local, @empty]}, @rr={0x7, 0x3, 0xfffffffffffffffd}, @noop, @cipso={0x86, 0x9, 0xe6e, [{0x0, 0x3, "ca"}]}, @rr={0x7, 0x23, 0x10000, [@remote, @local, @empty, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}]}, @cipso={0x86, 0x3b, 0x3f, [{0x5, 0xc, "a886de18344602168918"}, {0x7, 0x11, "ef29777c1e73d089cf233feef8605b"}, {0x2, 0x8, "385c0644b14c"}, {0x7, 0x6, "12d4673e"}, {0x7, 0x4, "ef0f"}, {0x7, 0x6, "83b4cf62"}]}, @ssrr={0x89, 0xf, 0xfffffffffffffff8, [@loopback, @empty, @broadcast]}]}}, @tipc=@payload_mcast={{{{{{0x2e, 0x0, 0x10000, 0x87, 0x2, 0xb, 0x3, 0x2, 0x6, 0x0, 0x3, 0x4, 0x7, 0x1, 0x101, 0xfffffffffffff800, 0x2, 0x4e21, 0x4e21}}, 0x0, 0x1}}}, [0x0, 0x0]}}}, 0x176) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000001c0)={0x6, 0xc, [0x8, 0xffff, 0xfbb]}) 14:17:03 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc0D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:03 executing program 2 (fault-call:10 fault-nth:0): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x222000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00', 0x6}) close(0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) [ 878.551284][ T5552] FAULT_INJECTION: forcing a failure. [ 878.551284][ T5552] name failslab, interval 1, probability 0, space 0, times 0 [ 878.617297][ T5552] CPU: 0 PID: 5552 Comm: syz-executor.5 Not tainted 5.1.0-rc5 #68 [ 878.625152][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.625160][ T5552] Call Trace: [ 878.625190][ T5552] dump_stack+0x172/0x1f0 [ 878.625217][ T5552] should_fail.cold+0xa/0x15 [ 878.647499][ T5552] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 878.653342][ T5552] ? ___might_sleep+0x163/0x280 [ 878.658211][ T5552] __should_failslab+0x121/0x190 [ 878.663159][ T5552] should_failslab+0x9/0x14 14:17:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) utimensat(r1, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x0, 0x7530}, {0x0, 0x2710}}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000480)="3034a9df7e665e19ebab76cb93e887e455bd48205c7dfbe41458fec5061728842528400a9bddf9952bd91f7cf7afe587970a4c999f8fcc33ad309406b1300bdc8b842f4fea5adb559a34897e5d1fb47fe08787bcc70fdee32be09534a9fe41d15a30761482349c1cf42efd17b3eb120a16bb2e11270bb862e00f", 0xfffffffffffffe12}, {&(0x7f0000000140)="8ee9400b426fac0a7d942eea0dab5cd52fc4b7150aae31e7fbd5a9d0868aff22dd63750f31172273d091f7258de7af7706e3419257db10c5abf3bab23bcbbc2a5ead8d5506a3e72ad44769c1d2c993f8aac551c23292ac1c59b91409abeda8f693243eab5b9298d53b5c0fdd990b4f3de9a1c7af2803f6015ee9125be11558d035b5801ef2c6d7283f4c266de1f6235d523139a5681223ec6d90d696091f475462", 0xa1}, {&(0x7f0000000280)="4e1da3065522151787915bcb4ac87546aa768bfd0abc94c304e0158fcb1723a1b2ec38827f7edbd8b4d07d55faec719f2307e31f4c55457662d60af8c27a10287a6df2553029c8d5c13e4a7accef0d70fd3832b73b2c7acde31bd1cb819bc4c54fd87eb424047a5630466163437212f31504294171be3b3e5484be4085d8ba4450e68b36b83dcba68fd42cbf6d8b194e2e317a4674fa76e0c8acdb846260eba68788f362e3af51dddc1646f3d5992622d9061f2f2273618a1b7d2ca33a882aeae045ca444df8af367e594de04c14bf8090a6", 0xd2}, {&(0x7f0000000380)="7306374ac3354b7dd6bc5998c2893b7e886b80af9741c3e3bb563bbe0c9bbe14549b03628955079fa385d385d6a43236a3b1fd603bded183bc56f1044e3809b60934bf416a47bd4c5b633c35d601f611443a4c689ae8ee6aba64e5d01b83ffcad32c8cf9fa9995bf751da64902854a7e6640f1ed2d69f280a6d0ce709ac97051153d20d3874461a2501436b107d410b1d15753ed5f1280b00933ce12e9780d8057b1abeb36f7926f20fd962264ee831dc75870c8d2e2ddf505b941cc0dae9a149c69ac3cc47e2b01", 0xc8}], 0x4) [ 878.667775][ T5552] kmem_cache_alloc_trace+0x2d1/0x760 [ 878.673159][ T5552] ? kasan_check_read+0x11/0x20 [ 878.678033][ T5552] alloc_pipe_info+0xb9/0x430 [ 878.681254][ T5601] FAULT_INJECTION: forcing a failure. [ 878.681254][ T5601] name failslab, interval 1, probability 0, space 0, times 0 [ 878.682719][ T5552] ? trace_hardirqs_on_caller+0x6a/0x220 [ 878.682742][ T5552] splice_direct_to_actor+0x775/0x970 [ 878.682760][ T5552] ? common_file_perm+0x238/0x720 [ 878.682776][ T5552] ? generic_pipe_buf_nosteal+0x10/0x10 [ 878.682798][ T5552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 878.682812][ T5552] ? do_splice_to+0x190/0x190 [ 878.682840][ T5552] ? rw_verify_area+0x118/0x360 [ 878.732697][ T5552] do_splice_direct+0x1da/0x2a0 [ 878.732718][ T5552] ? splice_direct_to_actor+0x970/0x970 [ 878.743299][ T5552] ? rw_verify_area+0x118/0x360 [ 878.748168][ T5552] do_sendfile+0x597/0xd00 [ 878.752798][ T5552] ? do_compat_pwritev64+0x1c0/0x1c0 [ 878.752817][ T5552] ? trace_hardirqs_on_caller+0x6a/0x220 [ 878.752840][ T5552] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 878.752860][ T5552] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 878.752876][ T5552] ? __ia32_sys_sendfile64+0x220/0x220 [ 878.752912][ T5552] do_fast_syscall_32+0x281/0xc98 [ 878.752940][ T5552] entry_SYSENTER_compat+0x70/0x7f [ 878.752953][ T5552] RIP: 0023:0xf7f6f869 14:17:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffe) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x608d00, 0x0) [ 878.752969][ T5552] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 878.752977][ T5552] RSP: 002b:00000000f5d6b0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 878.752992][ T5552] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000008 [ 878.753000][ T5552] RDX: 0000000000000000 RSI: 0000000002000007 RDI: 0000000000000000 [ 878.753008][ T5552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 878.753016][ T5552] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 878.753024][ T5552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 878.759332][ T5601] CPU: 1 PID: 5601 Comm: syz-executor.2 Not tainted 5.1.0-rc5 #68 [ 878.759345][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.759350][ T5601] Call Trace: [ 878.759374][ T5601] dump_stack+0x172/0x1f0 [ 878.759397][ T5601] should_fail.cold+0xa/0x15 [ 878.759418][ T5601] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 878.759449][ T5601] ? ___might_sleep+0x163/0x280 14:17:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 878.759472][ T5601] __should_failslab+0x121/0x190 [ 878.759490][ T5601] should_failslab+0x9/0x14 [ 878.759510][ T5601] kmem_cache_alloc_node_trace+0x270/0x720 [ 878.759539][ T5601] __kmalloc_node+0x3d/0x70 [ 878.759560][ T5601] kvmalloc_node+0xbd/0x100 [ 878.759578][ T5601] alloc_netdev_mqs+0x98/0xd30 [ 878.759596][ T5601] ? tun_show_owner+0x170/0x170 [ 878.759615][ T5601] __tun_chr_ioctl+0x178d/0x3ee0 [ 878.759638][ T5601] ? tun_select_queue+0x7d0/0x7d0 [ 878.759652][ T5601] ? __fget+0x381/0x550 [ 878.759685][ T5601] ? tomoyo_file_ioctl+0x23/0x30 [ 878.759704][ T5601] ? __tun_chr_ioctl+0x3ee0/0x3ee0 [ 878.759720][ T5601] tun_chr_compat_ioctl+0x29/0x30 [ 878.759741][ T5601] __ia32_compat_sys_ioctl+0x197/0x620 [ 878.759764][ T5601] do_fast_syscall_32+0x281/0xc98 [ 878.759785][ T5601] entry_SYSENTER_compat+0x70/0x7f [ 878.759797][ T5601] RIP: 0023:0xf7fb7869 [ 878.759812][ T5601] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 878.759821][ T5601] RSP: 002b:00000000f5db30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 878.759836][ T5601] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 878.759845][ T5601] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 878.759853][ T5601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 878.759861][ T5601] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 14:17:03 executing program 5 (fault-call:23 fault-nth:1): pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) [ 878.759869][ T5601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:17:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) [ 879.193046][ T6084] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 879.257063][ T6090] FAULT_INJECTION: forcing a failure. [ 879.257063][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 879.272206][ T6090] CPU: 1 PID: 6090 Comm: syz-executor.5 Not tainted 5.1.0-rc5 #68 [ 879.280027][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.280034][ T6090] Call Trace: [ 879.280062][ T6090] dump_stack+0x172/0x1f0 [ 879.280086][ T6090] should_fail.cold+0xa/0x15 [ 879.280106][ T6090] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 879.280129][ T6090] ? ___might_sleep+0x163/0x280 [ 879.280151][ T6090] __should_failslab+0x121/0x190 [ 879.280169][ T6090] should_failslab+0x9/0x14 [ 879.280187][ T6090] __kmalloc+0x2dc/0x740 [ 879.280208][ T6090] ? alloc_pipe_info+0x103/0x430 [ 879.280226][ T6090] ? alloc_pipe_info+0x199/0x430 [ 879.280247][ T6090] alloc_pipe_info+0x199/0x430 [ 879.280269][ T6090] splice_direct_to_actor+0x775/0x970 [ 879.280289][ T6090] ? common_file_perm+0x238/0x720 14:17:03 executing program 2 (fault-call:10 fault-nth:1): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x222000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00', 0x6}) close(0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) [ 879.280307][ T6090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 879.280331][ T6090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 879.280347][ T6090] ? do_splice_to+0x190/0x190 [ 879.280369][ T6090] ? rw_verify_area+0x118/0x360 [ 879.280389][ T6090] do_splice_direct+0x1da/0x2a0 [ 879.280409][ T6090] ? splice_direct_to_actor+0x970/0x970 [ 879.280445][ T6090] ? rw_verify_area+0x118/0x360 [ 879.280467][ T6090] do_sendfile+0x597/0xd00 [ 879.280496][ T6090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 879.280514][ T6090] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 879.280527][ T6090] ? fput_many+0x12c/0x1a0 [ 879.280542][ T6090] ? fput+0x1b/0x20 [ 879.280564][ T6090] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 879.280581][ T6090] ? __ia32_sys_sendfile64+0x220/0x220 [ 879.280599][ T6090] ? do_fast_syscall_32+0xd1/0xc98 [ 879.280616][ T6090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 879.280635][ T6090] ? trace_hardirqs_on+0x67/0x230 [ 879.280655][ T6090] do_fast_syscall_32+0x281/0xc98 [ 879.280679][ T6090] entry_SYSENTER_compat+0x70/0x7f [ 879.280692][ T6090] RIP: 0023:0xf7f6f869 14:17:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x90440, 0x0) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x2}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 879.280712][ T6090] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 879.280721][ T6090] RSP: 002b:00000000f5d6b0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 879.280737][ T6090] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000008 [ 879.280747][ T6090] RDX: 0000000000000000 RSI: 0000000002000007 RDI: 0000000000000000 [ 879.280756][ T6090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 879.280765][ T6090] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 879.280774][ T6090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 879.758491][ T6500] FAULT_INJECTION: forcing a failure. [ 879.758491][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 879.776822][ T6500] CPU: 1 PID: 6500 Comm: syz-executor.2 Not tainted 5.1.0-rc5 #68 [ 879.784664][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.794726][ T6500] Call Trace: [ 879.798317][ T6500] dump_stack+0x172/0x1f0 [ 879.802660][ T6500] should_fail.cold+0xa/0x15 [ 879.807277][ T6500] ? trace_hardirqs_on_caller+0x6a/0x220 [ 879.812926][ T6500] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 879.818750][ T6500] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 879.824221][ T6500] __should_failslab+0x121/0x190 [ 879.829163][ T6500] should_failslab+0x9/0x14 [ 879.833677][ T6500] kmem_cache_alloc_trace+0x4b/0x760 [ 879.838989][ T6500] __hw_addr_create_ex+0x5e/0x310 [ 879.844032][ T6500] __hw_addr_add_ex+0x1ef/0x2b0 [ 879.848919][ T6500] dev_addr_init+0x118/0x200 [ 879.853523][ T6500] ? dev_mc_flush+0x40/0x40 [ 879.858039][ T6500] ? __kmalloc_node+0x4e/0x70 [ 879.862724][ T6500] alloc_netdev_mqs+0x142/0xd30 [ 879.867585][ T6500] ? tun_show_owner+0x170/0x170 [ 879.872447][ T6500] __tun_chr_ioctl+0x178d/0x3ee0 [ 879.877397][ T6500] ? tun_select_queue+0x7d0/0x7d0 [ 879.882431][ T6500] ? __fget+0x381/0x550 [ 879.886601][ T6500] ? fput+0x1b/0x20 [ 879.890416][ T6500] ? tomoyo_file_ioctl+0x23/0x30 [ 879.895382][ T6500] ? __tun_chr_ioctl+0x3ee0/0x3ee0 [ 879.900516][ T6500] tun_chr_compat_ioctl+0x29/0x30 [ 879.905548][ T6500] __ia32_compat_sys_ioctl+0x197/0x620 [ 879.911017][ T6500] do_fast_syscall_32+0x281/0xc98 [ 879.916053][ T6500] entry_SYSENTER_compat+0x70/0x7f [ 879.921162][ T6500] RIP: 0023:0xf7fb7869 [ 879.925233][ T6500] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 879.944846][ T6500] RSP: 002b:00000000f5db30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 879.953365][ T6500] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 879.961348][ T6500] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 879.969338][ T6500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 879.977318][ T6500] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 879.985307][ T6500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:17:04 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xe2H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:04 executing program 5 (fault-call:23 fault-nth:2): pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000008000080000000a80000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000041000000000000000900000000000000f32bb17a00000000db0400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8d6f51d61f715da200ac91bcbc283bfafdb9435ee56bc8d8d306a814de07593ac308a17f7142cdcad575a6f666874fb16b04d19bf91ca797847f9a2536315f90fdaf7d1fad421dabd6f84939b43050f0b42d2c91d752bd3987b2f7d340dc0d4598e75ee797192e024394fc9d42a7b89b638131d1157481576c2ffae4f61b88ac69497992ef543f777167f7baba8def0ab0cbd1e99f97119c228814c0782844c86c255d981c5ac8b2d26c4fe4eba2c068a31d55"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:17:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:04 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc1D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x25dd06a7cff36f45) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:17:04 executing program 2 (fault-call:10 fault-nth:2): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x222000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00', 0x6}) close(0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) 14:17:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=""/254) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)=0x40, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x5e, @multicast2, 0x4e21, 0x3, 'nq\x00', 0x20, 0x4e1, 0x2c}, 0x2c) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r2 = dup3(r1, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a45323, &(0x7f0000000680)={{0x4, 0xffffffff}, 'port0\x00', 0x46, 0x1000, 0x3, 0x100, 0x4, 0x3, 0x100000001, 0x0, 0x4, 0xfce}) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000200)) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000280)={"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"}) getpeername$unix(r1, &(0x7f0000000740)=@abs, &(0x7f00000007c0)=0x6e) [ 880.275753][ T6513] FAULT_INJECTION: forcing a failure. [ 880.275753][ T6513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 880.325520][ T6513] CPU: 1 PID: 6513 Comm: syz-executor.5 Not tainted 5.1.0-rc5 #68 [ 880.333394][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.343460][ T6513] Call Trace: [ 880.343489][ T6513] dump_stack+0x172/0x1f0 [ 880.343511][ T6513] should_fail.cold+0xa/0x15 [ 880.343533][ T6513] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 880.343552][ T6513] ? ___might_sleep+0x163/0x280 [ 880.343575][ T6513] should_fail_alloc_page+0x50/0x60 [ 880.355751][ T6513] __alloc_pages_nodemask+0x1a1/0x7e0 [ 880.355774][ T6513] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 880.355805][ T6513] ? debug_smp_processor_id+0x2e/0x280 [ 880.366443][ T6513] ? debug_smp_processor_id+0x37/0x280 [ 880.366463][ T6513] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 880.366477][ T6513] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 880.366507][ T6513] alloc_pages_vma+0xdd/0x540 [ 880.377057][ T6513] shmem_alloc_page+0xc0/0x180 [ 880.377075][ T6513] ? shmem_swapin+0x1a0/0x1a0 [ 880.377111][ T6513] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 880.377131][ T6513] ? __vm_enough_memory+0x320/0x5a0 [ 880.388283][ T6513] shmem_alloc_and_acct_page+0x165/0x970 [ 880.388307][ T6513] shmem_getpage_gfp+0x43b/0x2500 [ 880.388338][ T6513] ? shmem_unuse_inode.constprop.0+0xfd0/0xfd0 [ 880.388359][ T6513] ? copy_page_to_iter+0x4e7/0xd60 [ 880.388382][ T6513] shmem_file_read_iter+0x30e/0xbd0 [ 880.410985][ T6513] ? shmem_write_begin+0x1e0/0x1e0 [ 880.411004][ T6513] ? __fsnotify_parent+0x9f/0x3d0 [ 880.411021][ T6513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 880.411042][ T6513] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 880.431363][ T6513] ? iov_iter_pipe+0xba/0x2f0 [ 880.431387][ T6513] generic_file_splice_read+0x4b4/0x800 [ 880.431405][ T6513] ? add_to_pipe+0x350/0x350 [ 880.431443][ T6513] ? rw_verify_area+0x118/0x360 [ 880.463860][ T6513] ? add_to_pipe+0x350/0x350 [ 880.463879][ T6513] do_splice_to+0x12a/0x190 [ 880.463910][ T6513] splice_direct_to_actor+0x2d2/0x970 [ 880.463928][ T6513] ? generic_pipe_buf_nosteal+0x10/0x10 [ 880.463954][ T6513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 880.485659][ T6513] ? do_splice_to+0x190/0x190 [ 880.485693][ T6513] ? rw_verify_area+0x118/0x360 [ 880.500660][ T6513] do_splice_direct+0x1da/0x2a0 [ 880.500680][ T6513] ? splice_direct_to_actor+0x970/0x970 [ 880.500712][ T6513] do_sendfile+0x597/0xd00 [ 880.500739][ T6513] ? do_compat_pwritev64+0x1c0/0x1c0 [ 880.500766][ T6513] __ia32_compat_sys_sendfile+0x1f1/0x230 [ 880.500788][ T6513] ? __ia32_sys_sendfile64+0x220/0x220 [ 880.509855][ T6513] ? do_fast_syscall_32+0xd1/0xc98 [ 880.509874][ T6513] ? lockdep_hardirqs_on+0x418/0x5d0 [ 880.509901][ T6513] ? trace_hardirqs_on+0x67/0x230 [ 880.509921][ T6513] do_fast_syscall_32+0x281/0xc98 [ 880.509943][ T6513] entry_SYSENTER_compat+0x70/0x7f [ 880.509956][ T6513] RIP: 0023:0xf7f6f869 [ 880.509972][ T6513] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 14:17:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x206) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffff800, 0x101040) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) move_pages(r2, 0x5, &(0x7f0000000100)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x4) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xc) signalfd4(r1, &(0x7f0000000140)={0x2}, 0x8, 0x80000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f00000004c0)=""/214) [ 880.509981][ T6513] RSP: 002b:00000000f5d6b0cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 880.509995][ T6513] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000008 [ 880.510004][ T6513] RDX: 0000000000000000 RSI: 0000000002000007 RDI: 0000000000000000 [ 880.510023][ T6513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.551629][ T6513] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 880.551638][ T6513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.744831][ T6516] FAULT_INJECTION: forcing a failure. [ 880.744831][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 880.770341][ T6516] CPU: 0 PID: 6516 Comm: syz-executor.2 Not tainted 5.1.0-rc5 #68 [ 880.778175][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.788239][ T6516] Call Trace: [ 880.791557][ T6516] dump_stack+0x172/0x1f0 [ 880.796001][ T6516] should_fail.cold+0xa/0x15 [ 880.800612][ T6516] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 880.806441][ T6516] ? ___might_sleep+0x163/0x280 [ 880.811308][ T6516] __should_failslab+0x121/0x190 [ 880.816253][ T6516] should_failslab+0x9/0x14 [ 880.820774][ T6516] kmem_cache_alloc_node_trace+0x270/0x720 [ 880.826596][ T6516] ? tun_setup+0x8d/0x2d0 [ 880.830944][ T6516] __kmalloc_node+0x3d/0x70 [ 880.835465][ T6516] kvmalloc_node+0x68/0x100 [ 880.839982][ T6516] alloc_netdev_mqs+0x67f/0xd30 [ 880.844848][ T6516] ? tun_show_owner+0x170/0x170 [ 880.849726][ T6516] __tun_chr_ioctl+0x178d/0x3ee0 [ 880.854681][ T6516] ? tun_select_queue+0x7d0/0x7d0 [ 880.859714][ T6516] ? __fget+0x381/0x550 [ 880.863898][ T6516] ? fput+0x1b/0x20 [ 880.867722][ T6516] ? tomoyo_file_ioctl+0x23/0x30 [ 880.872670][ T6516] ? __tun_chr_ioctl+0x3ee0/0x3ee0 [ 880.877784][ T6516] tun_chr_compat_ioctl+0x29/0x30 [ 880.882817][ T6516] __ia32_compat_sys_ioctl+0x197/0x620 [ 880.888291][ T6516] do_fast_syscall_32+0x281/0xc98 [ 880.893327][ T6516] entry_SYSENTER_compat+0x70/0x7f [ 880.898444][ T6516] RIP: 0023:0xf7fb7869 [ 880.902514][ T6516] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 880.922736][ T6516] RSP: 002b:00000000f5db30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 880.931154][ T6516] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 880.939127][ T6516] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 880.947099][ T6516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.955070][ T6516] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 880.963046][ T6516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:17:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc008641d, &(0x7f0000000200)={r2, &(0x7f0000000100)=""/231}) 14:17:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xe3H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:05 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) 14:17:05 executing program 2 (fault-call:10 fault-nth:3): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x222000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00', 0x6}) close(0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) [ 881.049990][ T6977] validate_nla: 1 callbacks suppressed [ 881.052241][ T6977] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'}) 14:17:05 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc2D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) [ 881.127025][ T6977] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/117, 0x75) [ 881.300264][ T7122] FAULT_INJECTION: forcing a failure. [ 881.300264][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 881.332571][ T7122] CPU: 1 PID: 7122 Comm: syz-executor.2 Not tainted 5.1.0-rc5 #68 [ 881.340422][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.350491][ T7122] Call Trace: [ 881.353797][ T7122] dump_stack+0x172/0x1f0 [ 881.358150][ T7122] should_fail.cold+0xa/0x15 [ 881.362763][ T7122] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 881.368588][ T7122] ? ___might_sleep+0x163/0x280 [ 881.373474][ T7122] __should_failslab+0x121/0x190 [ 881.378440][ T7122] should_failslab+0x9/0x14 [ 881.382983][ T7122] kmem_cache_alloc_node_trace+0x270/0x720 [ 881.388823][ T7122] ? kasan_unpoison_shadow+0x35/0x50 [ 881.394122][ T7122] __kmalloc_node+0x3d/0x70 [ 881.398635][ T7122] kvmalloc_node+0x68/0x100 [ 881.403151][ T7122] alloc_netdev_mqs+0x821/0xd30 [ 881.408019][ T7122] __tun_chr_ioctl+0x178d/0x3ee0 [ 881.412971][ T7122] ? tun_select_queue+0x7d0/0x7d0 [ 881.418002][ T7122] ? __fget+0x381/0x550 [ 881.422259][ T7122] ? fput+0x1b/0x20 [ 881.426078][ T7122] ? tomoyo_file_ioctl+0x23/0x30 [ 881.431021][ T7122] ? __tun_chr_ioctl+0x3ee0/0x3ee0 [ 881.436140][ T7122] tun_chr_compat_ioctl+0x29/0x30 [ 881.441180][ T7122] __ia32_compat_sys_ioctl+0x197/0x620 [ 881.446680][ T7122] do_fast_syscall_32+0x281/0xc98 [ 881.451716][ T7122] entry_SYSENTER_compat+0x70/0x7f [ 881.456828][ T7122] RIP: 0023:0xf7fb7869 [ 881.460910][ T7122] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 881.480527][ T7122] RSP: 002b:00000000f5db30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 881.488954][ T7122] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 881.496936][ T7122] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.504923][ T7122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.512913][ T7122] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 881.520927][ T7122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.614738][ T7148] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 14:17:06 executing program 0: socket$netlink(0x10, 0x3, 0x0) 14:17:06 executing program 2 (fault-call:10 fault-nth:4): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x222000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00', 0x6}) close(0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) 14:17:06 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc3D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x400000) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x1, "9a6afb7a6e29ad6be47f4aaa8b219a825d6073bf4a3153c9a1df0e50a7dfca5c", 0x2}) [ 881.869573][ T7458] FAULT_INJECTION: forcing a failure. [ 881.869573][ T7458] name failslab, interval 1, probability 0, space 0, times 0 [ 881.914580][ T7458] CPU: 1 PID: 7458 Comm: syz-executor.2 Not tainted 5.1.0-rc5 #68 [ 881.922439][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.932496][ T7458] Call Trace: [ 881.935808][ T7458] dump_stack+0x172/0x1f0 [ 881.940151][ T7458] should_fail.cold+0xa/0x15 [ 881.944752][ T7458] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 881.950574][ T7458] ? ___might_sleep+0x163/0x280 [ 881.955441][ T7458] __should_failslab+0x121/0x190 [ 881.960389][ T7458] should_failslab+0x9/0x14 [ 881.964912][ T7458] kmem_cache_alloc_node_trace+0x270/0x720 [ 881.970725][ T7458] ? mark_held_locks+0xa4/0xf0 [ 881.975505][ T7458] __kmalloc_node+0x3d/0x70 [ 881.980018][ T7458] kvmalloc_node+0xbd/0x100 [ 881.984535][ T7458] tun_attach+0x754/0x1440 [ 881.988968][ T7458] ? retint_kernel+0x2d/0x2d [ 881.993579][ T7458] __tun_chr_ioctl+0x2180/0x3ee0 [ 881.998541][ T7458] ? tun_select_queue+0x7d0/0x7d0 [ 882.003573][ T7458] ? __fget+0x381/0x550 [ 882.007747][ T7458] ? fput+0x1b/0x20 [ 882.011571][ T7458] ? tomoyo_file_ioctl+0x23/0x30 [ 882.016516][ T7458] ? __tun_chr_ioctl+0x3ee0/0x3ee0 [ 882.021630][ T7458] tun_chr_compat_ioctl+0x29/0x30 [ 882.026669][ T7458] __ia32_compat_sys_ioctl+0x197/0x620 [ 882.032140][ T7458] do_fast_syscall_32+0x281/0xc98 [ 882.037197][ T7458] entry_SYSENTER_compat+0x70/0x7f [ 882.042309][ T7458] RIP: 0023:0xf7fb7869 [ 882.046389][ T7458] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 882.066012][ T7458] RSP: 002b:00000000f5db30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 882.074435][ T7458] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 882.082494][ T7458] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 882.090464][ T7458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 882.098476][ T7458] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 882.106470][ T7458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:17:06 executing program 5: pipe(0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) semget(0xffffffffffffffff, 0x2, 0x400) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x7, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x80000000, @mcast1, 0x4}}}, 0x108) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000001c0)=""/245, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x0, 0x4}) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0x7, @local, 0x100000001}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x1c, r3, 0x406, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8000}]}, 0x1c}}, 0x4004) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, 0x0, 0x0, 0x20) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)="63c6c7ee1c03812c305cbe4210681d42f05529c771c162de53956ac7d99fc89cde2ffb4c667f94d355f1ae2d2fa93cc232505370d18c99412bf2376b837afda5d6bcfad39b606520acd866dcb23b3c8c15e85059c43f4f062eff1bd356ef747740761e56e1e86bab798e96a6d8cb29935c9caeaa1887c4e8bd9a7a7c3d1b68ac23f1330f8465bc432b81dd87fb904618bc040d418b58abdf3370258614c355bb29232cc4b94447d1f32ccb0358ec78af2b0a4fde3706b6318a566936cab0e5cea0601d55415a4c20065f4b65020e3b5c51ad93", 0xd3}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000680), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000008) 14:17:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}) 14:17:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xe4H\x03\x00', 0x6}) close(0xffffffffffffffff) dup3(r1, 0xffffffffffffffff, 0x0) 14:17:07 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\xc4D\x03\x00', 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(0xffffffffffffffff) dup3(r3, r1, 0x0) 14:17:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4000000000d) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) 14:17:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000300)={'bc\x00\xc1f\x00'}) 14:17:07 executing program 2 (fault-call:10 fault-nth:5): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x220830) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x222000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x5, 0x3, 0x2, 0x2, 0x0, 0x7fff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'bc\x00\xc1f\x00', 0x6}) close(0xffffffffffffffff) dup3(0xffffffffffffffff, r1, 0x0) [ 882.594331][ T7930] FAULT_INJECTION: forcing a failure. [ 882.594331][ T7930] name failslab, interval 1, probability 0, space 0, times 0 [ 882.651878][ T7930] CPU: 0 PID: 7930 Comm: syz-executor.2 Not tainted 5.1.0-rc5 #68 [ 882.659755][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.669824][ T7930] Call Trace: [ 882.673139][ T7930] dump_stack+0x172/0x1f0 [ 882.677490][ T7930] should_fail.cold+0xa/0x15 [ 882.682099][ T7930] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 882.687942][ T7930] ? ___might_sleep+0x163/0x280 [ 882.692808][ T7930] __should_failslab+0x121/0x190 [ 882.697756][ T7930] should_failslab+0x9/0x14 [ 882.702270][ T7930] __kmalloc_track_caller+0x2d8/0x740 [ 882.707658][ T7930] ? mark_held_locks+0xa4/0xf0 [ 882.712437][ T7930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 882.717915][ T7930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 882.723388][ T7930] ? kstrdup_const+0x66/0x80 [ 882.727987][ T7930] kstrdup+0x3a/0x70 [ 882.731903][ T7930] kstrdup_const+0x66/0x80 [ 882.736339][ T7930] kvasprintf_const+0x10e/0x190 [ 882.741199][ T7930] kobject_set_name_vargs+0x5b/0x150 [ 882.746497][ T7930] dev_set_name+0xbd/0xf0 14:17:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) [ 882.750835][ T7930] ? device_initialize+0x440/0x440 [ 882.755965][ T7930] ? __init_waitqueue_head+0x36/0x90 [ 882.761254][ T7930] ? pm_runtime_init+0x311/0x3b0 [ 882.766207][ T7930] netdev_register_kobject+0xc3/0x3c0 [ 882.771591][ T7930] register_netdevice+0x878/0xff0 [ 882.776627][ T7930] ? netdev_change_features+0xb0/0xb0 [ 882.782018][ T7930] __tun_chr_ioctl+0x21c9/0x3ee0 [ 882.787050][ T7930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 882.792523][ T7930] ? tun_select_queue+0x7d0/0x7d0 [ 882.797555][ T7930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 882.803026][ T7930] ? retint_kernel+0x2d/0x2d [ 882.807635][ T7930] ? __tun_chr_ioctl+0x3ee0/0x3ee0 [ 882.812756][ T7930] tun_chr_compat_ioctl+0x29/0x30 [ 882.817794][ T7930] __ia32_compat_sys_ioctl+0x197/0x620 [ 882.823271][ T7930] do_fast_syscall_32+0x281/0xc98 [ 882.828306][ T7930] entry_SYSENTER_compat+0x70/0x7f [ 882.833419][ T7930] RIP: 0023:0xf7fb7869 [ 882.837489][ T7930] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 882.855989][ T8243] QAT: Invalid ioctl [ 882.857093][ T7930] RSP: 002b:00000000f5db30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 882.857110][ T7930] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 882.857119][ T7930] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 882.857127][ T7930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 882.857136][ T7930] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 882.857144][ T7930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 882.912409][ T7930] ------------[ cut here ]------------ [ 882.917881][ T7930] kernel BUG at net/core/net-sysfs.c:1631! [ 882.925386][ T7930] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 882.931468][ T7930] CPU: 0 PID: 7930 Comm: syz-executor.2 Not tainted 5.1.0-rc5 #68 [ 882.939262][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.949327][ T7930] RIP: 0010:netdev_release+0x92/0xb0 [ 882.954612][ T7930] Code: 48 c1 ea 03 80 3c 02 00 75 29 48 8b bb 80 fa ff ff e8 72 af 21 fc 4c 89 ef e8 9a c2 f5 ff 5b 41 5c 41 5d 5d c3 e8 4e da e9 fb <0f> 0b e8 97 e9 21 fc eb 9c e8 f0 e9 21 fc eb d0 0f 1f 40 00 66 2e [ 882.974225][ T7930] RSP: 0018:ffff888048cd7b68 EFLAGS: 00010246 [ 882.980292][ T7930] RAX: 0000000000040000 RBX: ffff888048939920 RCX: ffffc9000a215000 [ 882.988268][ T7930] RDX: 0000000000040000 RSI: ffffffff8586b262 RDI: 0000000000000001 [ 882.996242][ T7930] RBP: ffff888048cd7b80 R08: ffff888068edc480 R09: ffff888068edcd20 [ 883.004217][ T7930] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 883.011974][ T3875] kobject: 'loop2' (00000000b1e3d77e): kobject_uevent_env [ 883.012188][ T7930] R13: ffff888048939380 R14: 0000000000000000 R15: 0000000000000000 [ 883.012201][ T7930] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5db3b40 [ 883.012211][ T7930] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 883.012219][ T7930] CR2: 000000000814b000 CR3: 000000008f8f2000 CR4: 00000000001406f0 [ 883.012238][ T7930] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 883.068173][ T7930] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 883.076158][ T7930] Call Trace: [ 883.079466][ T7930] ? xps_cpus_store+0x2b0/0x2b0 [ 883.084315][ T7930] device_release+0x7d/0x210 [ 883.088988][ T7930] kobject_put.cold+0x28f/0x2ec [ 883.093843][ T7930] put_device+0x20/0x30 [ 883.097996][ T7930] netdev_register_kobject+0x1a1/0x3c0 [ 883.103450][ T7930] register_netdevice+0x878/0xff0 [ 883.108472][ T7930] ? netdev_change_features+0xb0/0xb0 [ 883.113842][ T7930] __tun_chr_ioctl+0x21c9/0x3ee0 [ 883.118805][ T7930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 883.124262][ T7930] ? tun_select_queue+0x7d0/0x7d0 [ 883.130077][ T7930] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 883.135530][ T7930] ? retint_kernel+0x2d/0x2d [ 883.140118][ T7930] ? __tun_chr_ioctl+0x3ee0/0x3ee0 [ 883.145220][ T7930] tun_chr_compat_ioctl+0x29/0x30 [ 883.150243][ T7930] __ia32_compat_sys_ioctl+0x197/0x620 [ 883.155701][ T7930] do_fast_syscall_32+0x281/0xc98 [ 883.160724][ T7930] entry_SYSENTER_compat+0x70/0x7f [ 883.165823][ T7930] RIP: 0023:0xf7fb7869 [ 883.169894][ T7930] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 883.189914][ T7930] RSP: 002b:00000000f5db30cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 883.198409][ T7930] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400454ca [ 883.206899][ T7930] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.214864][ T7930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.222833][ T7930] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 883.230809][ T7930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.238775][ T7930] Modules linked in: 14:17:07 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000130009006900000000000000ab0080482500000046000107a277001419000a000d000000000003f50000000e4800ef38bf461e59d7", 0x39}], 0x1) sendfile64(r1, r1, &(0x7f0000000000), 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f00000000c0)=0x3) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) [ 883.250169][ T3875] kobject: 'loop2' (00000000b1e3d77e): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 883.250402][ T7930] ---[ end trace 94304dc20ef9fc6e ]--- [ 883.267661][ T7930] RIP: 0010:netdev_release+0x92/0xb0 [ 883.277755][ T7930] Code: 48 c1 ea 03 80 3c 02 00 75 29 48 8b bb 80 fa ff ff e8 72 af 21 fc 4c 89 ef e8 9a c2 f5 ff 5b 41 5c 41 5d 5d c3 e8 4e da e9 fb <0f> 0b e8 97 e9 21 fc eb 9c e8 f0 e9 21 fc eb d0 0f 1f 40 00 66 2e [ 883.297955][ T7738] kobject: 'loop2' (00000000b1e3d77e): kobject_uevent_env [ 883.297972][ T7930] RSP: 0018:ffff888048cd7b68 EFLAGS: 00010246 [ 883.307916][ T7738] kobject: 'loop2' (00000000b1e3d77e): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 883.311660][ T7930] RAX: 0000000000040000 RBX: ffff888048939920 RCX: ffffc9000a215000 [ 883.330514][ T7930] RDX: 0000000000040000 RSI: ffffffff8586b262 RDI: 0000000000000001 [ 883.342092][ T7930] RBP: ffff888048cd7b80 R08: ffff888068edc480 R09: ffff888068edcd20 [ 883.350427][ T7930] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 883.358742][ T7930] R13: ffff888048939380 R14: 0000000000000000 R15: 0000000000000000 [ 883.366936][ T7930] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000f5db3b40 [ 883.376271][ T7930] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 883.382964][ T7930] CR2: 0000000000606ed8 CR3: 000000008f8f2000 CR4: 00000000001406f0 [ 883.391090][ T7930] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 883.399154][ T7930] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 883.407193][ T7930] Kernel panic - not syncing: Fatal exception [ 883.414114][ T7930] Kernel Offset: disabled [ 883.418469][ T7930] Rebooting in 86400 seconds..