001c0))
open_by_handle_at(r2, &(0x7f0000000000)={0xc6, 0x395, "a0e5d226de255ebfb4bb8bdb5b5e837dcd9034c650611700b1e3039992f0c7c2a864f62ffaa3e4c42b2f039638ed6d7aa79303aa0cfafa99d6f4fb94c9404f10556697f73c7e25292f89abbc78a0539ee375b31d1f191cc044e4e8768e9f0b1c1199bfe277201b30e26d4ab4fbe6556d1344282d3ca4b3146e4e6f8cf97980173f1f007fbc36667bd4a4039f6939d8124aac654f262b4c86f88025370e270c32981c86d1097122077d7481ab84f35343e4adce7752684c01c1ed28cefd29"}, 0x8000)

08:30:56 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0)
write$evdev(r1, &(0x7f0000000040)=[{{0x77359400}, 0x2f, 0xff, 0x8a}, {{0x0, 0x7530}, 0x16, 0xfffc, 0x8}, {{}, 0x2, 0xff, 0x5}, {{0x77359400}, 0x5, 0x0, 0x8}, {{0x77359400}, 0x0, 0xcae6, 0x5}, {{0x77359400}, 0x3, 0x16, 0xfb8}, {{0x77359400}, 0x16, 0x6, 0x2}, {{0x77359400}, 0x5, 0x4973, 0x1}, {{0x77359400}, 0x16, 0x0, 0x7}], 0xd8)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

[  543.673208][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  543.679087][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:30:56 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x500a}}], 0x210, 0x0, 0x0)

08:30:56 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000106ff00fd4354c007110000f3050100080001000104231c", 0x1c)

08:30:56 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0003000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:30:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0xffffff7f, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:30:57 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000106ff00fd4354c007110000f3050100080001000104231c", 0x1c)

08:30:57 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xc00e}}], 0x210, 0x0, 0x0)

08:30:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:30:57 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0004000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:30:57 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000106ff00fd4354c007110000f3050100080001000104231c", 0x1c)

08:30:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0xffffff9e, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:30:58 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xff00}}], 0x210, 0x0, 0x0)

08:30:58 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0005000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:30:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0xfffffff0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:30:58 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1a000}}], 0x210, 0x0, 0x0)

08:30:59 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000106ff00fd4354c007110000f3050100080001000104231cc88c", 0x1e)

08:30:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
sendfile(r0, r0, &(0x7f0000000000), 0x19)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:30:59 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0006000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:30:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0xffffffff, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:30:59 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000106ff00fd4354c007110000f3050100080001000104231cc88c", 0x1e)

[  547.433182][    C0] net_ratelimit: 18 callbacks suppressed
[  547.433191][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  547.438933][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:00 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x34000}}], 0x210, 0x0, 0x0)

08:31:00 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0007000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  547.593302][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  547.599133][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:00 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000106ff00fd4354c007110000f3050100080001000104231cc88c", 0x1e)

[  547.833207][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  547.839034][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0)

[  548.233188][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  548.239072][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:00 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f000a000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:00 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x210, 0x0, 0x0)

[  548.553216][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  548.559055][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:01 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:01 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f000e000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:01 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x400300}}], 0x210, 0x0, 0x0)

[  549.393599][ T5340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
08:31:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:02 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f000f000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:02 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xa00100}}], 0x210, 0x0, 0x0)

08:31:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x3}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/oev/ptmx\x00', 0x2a2002, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x4000, 0x0)
r2 = add_key(&(0x7f0000000380)='L\x05g_jey\x1d\xf8\x9d\x0e\x94\xebT%X\xc8V\xdb\xa8\xb9%\xa7eI\xd4\xa1\x9e\xf7\xd5:\v\xa2\x10\xa2\x7f1\xd3&\xde;\x89\xa5\x00vE\xa0P\x92`\xef\x95,\xb5Zg\x90\xbc\x96\xc0u\x06\xb27\x0f\x18\xfe\xf3T\xea\xa0\xf3\xcc+`H\x88z\x9ba\x1e\n\x890\xc5\xc4\xd0\x93\xc3s\xf6\xcaY\xbe6\xf7 \x81\xac\x87\xc9\x1b\x9a\xfepq\xf5\xd3\x98\x9e\xa4q\xce\xb5B\x04\xe9\xda\xaf\xa81\x16\x99\xdb\x1c\xbeP\xcf\x04\xdf\xc7\x8e', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000000)="67e0e40e36c7615fa74e62fbcf180aedce8dc4fdf0a8fa06bb31fbae", 0x1c, 0xfffffffffffffffb)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x100000001)
r3 = add_key(&(0x7f0000000380)='L\x05g_jey\x1d\xf8\x9d\x0e\x94\xebT%X\xc8V\xdb\xa8\xb9%\xa7eI\xd4\xa1\x9e\xf7\xd5:\v\xa2\x10\xa2\x7f1\xd3&\xde;\x89\xa5\x00vE\xa0P\x92`\xef\x95,\xb5Zg\x90\xbc\x96\xc0u\x06\xb27\x0f\x18\xfe\xf3T\xea\xa0\xf3\xcc+`H\x88z\x9ba\x1e\n\x890\xc5\xc4\xd0\x93\xc3s\xf6\xcaY\xbe6\xf7 \x81\xac\x87\xc9\x1b\x9a\xfepq\xf5\xd3\x98\x9e\xa4q\xce\xb5B\x04\xe9\xda\xaf\xa81\x16\x99\xdb\x1c\xbeP\xcf\x04\xdf\xc7\x8e', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000000)="67e0e40e36c7615fa74e62fbcf180aedce8dc4fdf0a8fa06bb31fbae", 0x1c, 0xfffffffffffffffb)
keyctl$revoke(0x3, r3)
r4 = add_key(&(0x7f0000000380)='L\x05g_jey\x1d\xf8\x9d\x0e\x94\xebT%X\xc8V\xdb\xa8\xb9%\xa7eI\xd4\xa1\x9e\xf7\xd5:\v\xa2\x10\xa2\x7f1\xd3&\xde;\x89\xa5\x00vE\xa0P\x92`\xef\x95,\xb5Zg\x90\xbc\x96\xc0u\x06\xb27\x0f\x18\xfe\xf3T\xea\xa0\xf3\xcc+`H\x88z\x9ba\x1e\n\x890\xc5\xc4\xd0\x93\xc3s\xf6\xcaY\xbe6\xf7 \x81\xac\x87\xc9\x1b\x9a\xfepq\xf5\xd3\x98\x9e\xa4q\xce\xb5B\x04\xe9\xda\xaf\xa81\x16\x99\xdb\x1c\xbeP\xcf\x04\xdf\xc7\x8e', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000000)="67e0e40e36c7615fa74e62fbcf180aedce8dc4fdf0a8fa06bb31fbae", 0x1c, 0xfffffffffffffffb)
keyctl$revoke(0x3, r4)
keyctl$revoke(0x3, r4)
r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="e7093e40a37cc71d44d949304074ccdd5a2a1cd4e420c8a0317c9a0cbf51ca493e12c34a0076c893", 0x28, r2)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000240)={0xfffffffc, 0x7, 0x101, 0x24, 0x6, 0x0, 0x5, 0xfe, 0x1, 0x1000, 0x2})
ustat(0x3, &(0x7f0000000200))
r6 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000400)="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", 0x1000, 0xfffffffffffffffe)
r7 = add_key(&(0x7f0000000380)='L\x05g_jey\x1d\xf8\x9d\x0e\x94\xebT%X\xc8V\xdb\xa8\xb9%\xa7eI\xd4\xa1\x9e\xf7\xd5:\v\xa2\x10\xa2\x7f1\xd3&\xde;\x89\xa5\x00vE\xa0P\x92`\xef\x95,\xb5Zg\x90\xbc\x96\xc0u\x06\xb27\x0f\x18\xfe\xf3T\xea\xa0\xf3\xcc+`H\x88z\x9ba\x1e\n\x890\xc5\xc4\xd0\x93\xc3s\xf6\xcaY\xbe6\xf7 \x81\xac\x87\xc9\x1b\x9a\xfepq\xf5\xd3\x98\x9e\xa4q\xce\xb5B\x04\xe9\xda\xaf\xa81\x16\x99\xdb\x1c\xbeP\xcf\x04\xdf\xc7\x8e', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000000)="67e0e40e36c7615fa74e62fbcf180aedce8dc4fdf0a8fa06bb31fbae", 0x1c, 0xfffffffffffffffb)
keyctl$revoke(0x3, r7)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r7, 0xe5, 0xb7}, &(0x7f0000001400)={'enc=', 'oaep', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000001480)="eb543153cd06b6294ccafc699a20029d09222a70212442c9325b2bae0a0cc94fa558d4fd10ac090b916b6d43330e4600a01fa968822b05b535757c3f43b2d86da02d1ea653e51870c2d12d6a63fe19e43a81a9ed0279bffdaaa73e9bdf482cc7156c6d8d7e7b03aab15c20d0c2d5272e108fbf1e6fd0a16ef9aa2f4b9b857355fab4e3b9c72f4f7a9adbb242c06d908d72cf8a229a870a438dbd3028bb6ff736777cf985bb09ff99d3480347b8618b7929fe0424d96c459a840c288e9ed9bd93769034b48f4328b779b94825fe5becabce0cf6b08906136744de1e78484cfcfe346ea111e6", &(0x7f0000001580)=""/183)
keyctl$negate(0xd, r5, 0x4, r6)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r8, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r8, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, {0x8, 0x2, 0x6, 0x21ba}})

08:31:03 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:03 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0048000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:03 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x210, 0x0, 0x0)

08:31:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x4}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:03 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f004c000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:04 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:04 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$isdn(0x22, 0x3, 0x21)

08:31:04 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x2000000}}], 0x210, 0x0, 0x0)

08:31:04 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0060000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0xa}, [@nested={0x4}]}, 0x18}}, 0x0)

[  552.713297][    C0] net_ratelimit: 22 callbacks suppressed
[  552.713306][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  552.724838][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  552.730679][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  552.736524][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:05 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x14000000}}], 0x210, 0x0, 0x0)

08:31:05 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0068000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:05 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0xe}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:06 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x3f000000}}], 0x210, 0x0, 0x0)

08:31:06 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f006c000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  553.673242][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  553.679159][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:06 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0x17, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
pause()
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x400000000000000, 0x2000, 0x0, 0x643522804d539b3, 0x1b})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180))
r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000140)={0xff8ffff, 0x4ad, 0x3, [], &(0x7f00000000c0)={0x0, 0x8000, [], @p_u16=&(0x7f0000000080)}})

[  553.833233][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  553.839067][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0xf}, [@nested={0x4}]}, 0x18}}, 0x0)

[  554.073223][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  554.079105][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:06 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x40000000}}], 0x210, 0x0, 0x0)

08:31:06 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
close(r2)

08:31:07 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0074000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x60}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:07 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x4300)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:07 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCCONS(r0, 0x541d)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r2, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:31:07 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x400e0000}}], 0x210, 0x0, 0x0)

08:31:07 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f007a000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:08 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
close(r2)

08:31:08 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000000)=0x8, 0x4)

08:31:08 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00f0000206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:08 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x500a0000}}], 0x210, 0x0, 0x0)

08:31:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:08 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x8e8f3edaceed16b1, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
write$apparmor_current(r2, &(0x7f0000000080)=@hat={'permhat ', 0x3}, 0x1b)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)

08:31:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x4, &(0x7f0000000100)=[{&(0x7f0000000400)="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", 0x1000, 0x5}, {&(0x7f0000000340)="84e18e9678cc3717565252d660fbe1d8895fc89b06a797235f3ac1db9fe3730c84ed92b506032a63a7354be49911bf8f1e76b53c876a2d8e576731589ec50bcdb2e5b80995a82e7195251221dd2001000000000000000b7b970efb6e1f267033e7a4154d0d824fd20bd899d2c310123eefa5e6e54fd2993bdc8f", 0x7a, 0x7ffe}, {&(0x7f0000001400)="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", 0x1000, 0x3}, {&(0x7f0000000200)="86c1e94309ee2f5f1c0e7ad06731a207e6cc685263166d5485bb858fe32c0f0bf011506d06d83c543f28b4ba121ba87aa0475e364e35fb2b3e9546023dcb7b50775f742a317dbf40d6f1067712d4c3be1967b054ef88e4a47cbab46492ae6edd0c3d7daf55d47d5b152970ce8bfaf5b34f3eaa4df5459f411e5f05122494f39d75320aeeb852a305968fa963d1310f813cd6447d3099057a7bd8bcc7cf0b3d0cfadecbf3e0eb4166196d52408891b1b7365261c14aec4e1a0161ac7f80048789c067", 0xc2, 0x47f7}], 0x19300c, &(0x7f0000002400)=ANY=[@ANYBLOB="7773796e632c6e6f75756d642c6e6f626172723b65722c6c6f67627566733d30303030303030303030303030303830303030312c726f6f83636f6e746578743d597365727f752c646566636f6e746578743d757365725f752c7065726d69745f646972656374696f2c7063723d303030303030b0303030303030303030303033322c00"])
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, 0x7, 0x80000000, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)

08:31:09 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000030206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:09 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xc00e0000}}], 0x210, 0x0, 0x0)

08:31:09 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
close(r2)

08:31:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x3}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:09 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

08:31:10 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0056030206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  557.833171][    C0] net_ratelimit: 18 callbacks suppressed
[  557.833180][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  557.844790][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:10 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xff000000}}], 0x210, 0x0, 0x0)

[  557.993292][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  557.999140][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x4}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:10 executing program 0:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pt\xedx\x00', 0x300100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='x\x00', 0xa0001, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1f906f3daa58bfa5, 0x0)
write$P9_RMKDIR(r2, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x4, 0x0, 0x2}}, 0x14)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x6)
r4 = dup3(r0, r1, 0x80000)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x7)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000080))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x40200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0))
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x5)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r7, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800)

08:31:10 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4000, 0x0)

08:31:10 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  558.233176][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  558.239013][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:11 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x210, 0x0, 0x0)

08:31:11 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000050206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  558.633246][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  558.639078][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:11 executing program 5:
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x1c8)
ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000080))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x3)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x44040, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00')
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

[  558.953171][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  558.959039][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:11 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xa}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:11 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000060206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:12 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x40030000000000}}], 0x210, 0x0, 0x0)

08:31:12 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/\xdc\v\x00', 0xc000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x400)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x4c, "9d27ad61c42151d77c7e7bab9705cf1bc9ffb391f2da520498bb7fa78fb40194648f83c21dc1ceb8f21572aa994c86d6a88737879790d962275af0f121f0d452480fa50ae09f420569d6e20b"}, &(0x7f0000000200)=0x54)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:31:12 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x100, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

08:31:12 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000070206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:12 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xe}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:12 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xa0010000000000}}], 0x210, 0x0, 0x0)

08:31:13 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00000a0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:13 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00\xc3\xaa\xbd\xb77|$\xb7\xa4\x82\xe0\xa9S\xa0\xe6\xfdP\xfe\x92\xca\xa4\x99\x0e\xd6\x1c)\xc5\xd8\xb3\xed\xd0\x93T\x81\vIoQ\xe7\xc9\xeb\x95\xbd\xea\xc8f\xe19\xbe~\x9c\xb4!\xe3r\xce\xd3')
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="e00100000000000001000000000000000500000000000000410000000000000017000000020000cdff66345a7cbe00776c616e316c6f3a41626465766c6f76626f786e657431000000000000000000fbffffffffffffff00000000ff000000020000000000000000000000000000003e000000fd0000007374617400c3aabdb7377c24b7a482e0a953a0e6fd50fe92caa4992c351c29c5d8b3edd0939d6162ac54810b496f51e7c9eb95bdeac866e139be7e9cb421e372ced300000200000000000000ff00000000000000060000000700000073797374656d0000000000000000000002000000000000002d000000f6ffffff29656d305c6c6f70726f63656d30766d6e657431c773797374656d5e706f7369785f61636c5f6163636573735c0000000200000000000000080000000000000001000000452c00002f00000000000000060000000000000005000000000000001200000003000000316465762f6c6f6f702d636f6e74726f6c00000000000000060000000000000000020000000000003e000000040000007374617400c3aabdb7377c24b7a482e0a953a0e6fd50fe92caa4b10ed61c29c5d8b3edd01054810b496f51e7c9eb95bdeac866e139be7e9cb421e372ced3000001000000000000000004000000000000010000000900000027"], 0x1e0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/170, 0xaa}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/126, 0x7e}], 0x3, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r2, &(0x7f0000000280)="9ccb7345a702bdb3fac37037291dfffe6030aafff51509bab2cd970288f4275de399a9b485cc7d557d6d96bf2cf8e722a011fb8fd650d0c8cf49994e1440feef", &(0x7f00000002c0)=""/86, 0x4}, 0x20)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

08:31:13 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)

08:31:13 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xf}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:13 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x210, 0x0, 0x0)

08:31:14 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00000e0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:14 executing program 5:
openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x8800, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x60}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:14 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x200000000000000}}], 0x210, 0x0, 0x0)

08:31:14 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:15 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
r1 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffffffffffffffa)
r2 = add_key(&(0x7f0000000380)='L\x05g_jey\x1d\xf8\x9d\x0e\x94\xebT%X\xc8V\xdb\xa8\xb9%\xa7eI\xd4\xa1\x9e\xf7\xd5:\v\xa2\x10\xa2\x7f1\xd3&\xde;\x89\xa5\x00vE\xa0P\x92`\xef\x95,\xb5Zg\x90\xbc\x96\xc0u\x06\xb27\x0f\x18\xfe\xf3T\xea\xa0\xf3\xcc+`H\x88z\x9ba\x1e\n\x890\xc5\xc4\xd0\x93\xc3s\xf6\xcaY\xbe6\xf7 \x81\xac\x87\xc9\x1b\x9a\xfepq\xf5\xd3\x98\x9e\xa4q\xce\xb5B\x04\xe9\xda\xaf\xa81\x16\x99\xdb\x1c\xbeP\xcf\x04\xdf\xc7\x8e', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000000)="67e0e40e36c7615fa74e62fbcf180aedce8dc4fdf0a8fa06bb31fbae", 0x1c, 0xfffffffffffffffb)
keyctl$revoke(0x3, r2)
keyctl$instantiate_iov(0x14, r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="a7ed785e4faa03fa60d870193baea80151573b9b6bba6c3c9ed934cdb2a8d6ca7c40e0de5bb2fe55a1896526e5485190f7bc3a0df0d1406e496cfafa7ed52e8c30ef05d7fa67cdeaa59e051bc31db2c8e30ba1520311eda2ccc5fb8846a3b1771d2b13a488bdebcb72dc4c8e230bc51bbd7f557b7365", 0x76}, {&(0x7f0000000200)="cb88cf85ec81fa304648d05ee63a55339952b46c7f3917efdbe79d05a70ba2fb5be3c2f4e8f4eb0a59c87133ee5d50bbd0eb504de1586bf4c767909fac46fa125ac368befc0005640ceaf266d6a9f8a791ba4699b8b4c7051dea7de23cacad6613a4b8f9878649a577cbe251a440e78ab71c2fb24a3a1c437594548e1020d3c64c28184cecb2c06e1225bdeaf5", 0x18}, {&(0x7f0000000140)="514a4c901c4b66d6cf65366c281ee02110d9e1053efd195ba7e3038d83e34da9c9c21edbac37210e", 0x28}, {&(0x7f0000000180)="d22bc392d605629d708740317e80b95b3983225e3ac4273bd00db7b8318513646035c13c5a0c6abaa33371f7d046", 0x2e}, {&(0x7f0000000340)="b5fcf595c911717787edb46e311ca4c44450df31dd57aedc001a4653d84966c5601469e6c7db3b0892f18b7c4954033d5178d001a7a4908953dfd8d419109c8d0df48173be487055", 0x48}, {&(0x7f00000002c0)="068c10384061fb59a1fd9f3b97bca4ca8edd28342d6bb8f16719caf84ce89878bd53f9c6260223c0e91ff605", 0x2c}], 0x3, r2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  563.113190][    C0] net_ratelimit: 22 callbacks suppressed
[  563.113200][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  563.124792][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  563.130634][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  563.136466][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xf0}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:16 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:16 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1400000000000000}}], 0x210, 0x0, 0x0)

08:31:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = dup(0xffffffffffffffff)
getgid()
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000000)={0x3, 0x40, 0x400, 0x0, 0x1000, 0xff})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44)

08:31:16 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00000f0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:16 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x200000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x7}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  564.073190][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  564.079020][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x300}, [@nested={0x4}]}, 0x18}}, 0x0)

[  564.233223][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  564.239075][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  564.473190][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  564.479122][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:17 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000200206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:17 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x210, 0x0, 0x0)

08:31:17 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:17 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

08:31:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xa00}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:17 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00003f0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:18 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x4000000000000000}}], 0x210, 0x0, 0x0)

08:31:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xe00}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:18 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:18 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000400206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:18 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x200000, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:18 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x400e000000000000}}], 0x210, 0x0, 0x0)

08:31:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xf00}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:19 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:19 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
creat(&(0x7f0000000000)='./file0\x00', 0x1)

08:31:19 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000480206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:19 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x500a000000000000}}], 0x210, 0x0, 0x0)

08:31:20 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00004c0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x3f00}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:20 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x48002, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1)

08:31:20 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:20 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xc00e000000000000}}], 0x210, 0x0, 0x0)

[  568.233195][    C0] net_ratelimit: 18 callbacks suppressed
[  568.233204][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  568.244727][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  568.393177][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  568.399048][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:21 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0003560206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  568.633198][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  568.639032][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:21 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0xff00000000000000}}], 0x210, 0x0, 0x0)

08:31:21 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)

08:31:21 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@nested={0x4}]}, 0x18}}, 0x0)

[  569.033246][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  569.039116][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:21 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000600206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:21 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x210, 0x0, 0x0)

[  569.353195][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  569.359049][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x4041}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:22 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x9, 0x7, 0x4})
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r3 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fc)
prctl$PR_SET_SECCOMP(0x35, 0xad0864a76ec7e0f7, 0x0)
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000380)={"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"})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

08:31:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000680206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:22 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x4140}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00006c0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:23 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:23 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x2)
write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x10, 0x2, 0x3}}, 0x14)

08:31:23 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x210, 0x0, 0x0)

08:31:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000740206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0x6000}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:23 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00007a0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xf000}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:24 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}], 0x210, 0x0, 0x0)

08:31:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000f00206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:24 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000020206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x3}]}, 0x18}}, 0x0)

08:31:25 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000030206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x5}]}, 0x18}}, 0x0)

08:31:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000040206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:25 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:25 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa50}}], 0x210, 0x0, 0x0)

08:31:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000050206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:31:25 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  573.513182][    C0] net_ratelimit: 22 callbacks suppressed
[  573.513192][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  573.524729][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  573.530552][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  573.536356][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000060206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0)

08:31:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000070206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0)

08:31:26 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:26 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe40}}], 0x210, 0x0, 0x0)

08:31:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0)

08:31:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00000a0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:26 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xa}]}, 0x18}}, 0x0)

[  574.473180][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  574.479073][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00000e0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xe}]}, 0x18}}, 0x0)

[  574.633178][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  574.639023][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:27 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0)

08:31:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00000f0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x60}]}, 0x18}}, 0x0)

[  574.873165][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  574.879081][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000480206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:27 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xec0}}], 0x210, 0x0, 0x0)

08:31:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00004c0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:27 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xf0}]}, 0x18}}, 0x0)

08:31:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x300}]}, 0x18}}, 0x0)

08:31:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000600206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:27 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xa00}]}, 0x18}}, 0x0)

08:31:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000680206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xe00}]}, 0x18}}, 0x0)

08:31:28 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14800620}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x174, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xa6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x70}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x837}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="4de5b05e0da891ccf18767efdffe4c6e"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x50000000}, 0x14044000)
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

08:31:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00006c0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:28 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}}], 0x210, 0x0, 0x0)

08:31:28 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xf00}]}, 0x18}}, 0x0)

08:31:28 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = syz_open_procfs(r2, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6aee, 0x80)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)

08:31:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000740206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f00007a0206ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x3f00}]}, 0x18}}, 0x0)

08:31:28 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
pipe2(&(0x7f0000000080), 0x4800)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0x2b)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2)
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000140)=""/215, &(0x7f0000000040)=0xd7)

08:31:28 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000306ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x4000}]}, 0x18}}, 0x0)

[  576.317944][ T6714] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:28 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="78b9d4015720e7f65927354b737117dee58f34939ade51baf0fef272904cf722c7bb8f96ceea7485a00ef4985561346a0338fc98f6b55279c3706c98196b49e9762e938cf0edabe89f49da19c1bd140b1ea8ee1770c656af5cc8f6ce1304982c15a751bd7a0d10324c9193416481263d74126ab9c72da33231005ae96e2ecee5028a3686fea270004930fe5d7a7861f70ec928cd079140c6034bf3df123c0f75", 0xa0}, {&(0x7f00000000c0)="7581d118384744070fc9993ed2b3af327c534b724570e4471d485f6dcc4fe02cdb5763f0", 0x24}, {&(0x7f0000000100)="5324a7a525c05c85a8e8517c416b34f3ec2afe19ddb85f429e580bcc345a735c99ffa7e21ed996e306900cc438f4074d1c6809d5e5d06bafeaf3ad4303cfaf2b870a60ac70d9346d85d61562490d55b4d0155bfb59071b6164f831a0f75e812fd1d8ef5e39c0b3d6fcebc80879fb4e6a99dea383fbc5af4a5a5ba750edffa84cd44640dc39e4086c6d2149b266c56222668fdf6a3377aa1f9ab14b3d3c7640be872317bdb1f2ba3afc7666ba75bcc71f", 0xb0}, {&(0x7f00000001c0)="fac91c54920cb1", 0x7}, {&(0x7f0000000200)="a8fb021dc06b2829df57290eaaddea2a6d48158820fc632b44e2ec8b244d1fe5133b9bdd8b3c7b731eeef6838e386a0298104ef30cae5c6706cfdc2074baf36ff1da021d842918607a1ce629b4019abbd64855", 0x53}, {&(0x7f0000000380)="53c00962dd9dce8bb4521555d2a0a48a2bd052262423927cc86751fc6dcf45b9ba16a67218f113bfe4f3490b32533fa910e3fa0cb32ccdd97b41139ffb510210b91282decbde9625bd5438c5397d31120eda61cd0993ba0e3ad3a7254637bbd4c6e9647613c3b4f2c4dd8ef7809580988cae5b35e0032b983a5bdff9dd7b2a80eb7db29ddd6ec44231a9c0ed976dda01f6491806deb334909cf82d74333117700fe078ae4ad1cb60db4015cbbcb73f623b65cd55502b036665d51718679a372bb4119f0deab6fe9888d2c9b6232e49de116f4aecd003fceba3ce42dc316af18fd5a889c53fb4fe9b499c4e2aa39058", 0xef}], 0x6, 0xa)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0)
ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f00000004c0))
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000300)=0x1, 0x4)

[  576.375557][ T6714] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:29 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x210, 0x0, 0x0)

08:31:29 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:29 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000506ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x4041}]}, 0x18}}, 0x0)

08:31:29 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)={0xac5, 0xc, [0x8, 0xff, 0x3]})
r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x20000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000))
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="a66e06cb50dd7d4bd577612b10c3914b495c81475714f6aa9928857aa3ce80db2539b01567d90cc90e499621ea3d1a8836fc2b08eee6066ba2641705dfa10476332152c8131055df72dbe299c22e486674a472685cb31b181451d7ddd810e4915eb0c821831ea47e487971afb3b815301849272b13308b59a17dcdf83dfc0b5097", 0x81}], 0x1)

[  577.038646][ T6737] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  577.063915][ T6737] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x4140}]}, 0x18}}, 0x0)

08:31:29 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000a06ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:29 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:29 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  577.303987][ T6755] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  577.338319][ T6755] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x6000}]}, 0x18}}, 0x0)

08:31:29 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000004006ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:30 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:30 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x210, 0x0, 0x0)

08:31:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000005a06ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xf000}]}, 0x18}}, 0x0)

08:31:30 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:30 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
write$binfmt_script(r0, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x1025)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)

08:31:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000006706ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xffff}]}, 0x18}}, 0x0)

08:31:30 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000f00ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:30 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='-\x00', 0x2, 0x1)

08:31:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0xf}}, 0x0)

[  578.633174][    C0] net_ratelimit: 18 callbacks suppressed
[  578.633182][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  578.644710][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:31 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  578.793178][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  578.799094][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  578.868823][ T6845] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:31 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400e}}], 0x210, 0x0, 0x0)

08:31:31 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0xc0}}, 0x0)

08:31:31 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'veth1\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000080)="cdfa1a9c481a4eed5b701a2b77846df94f49c282cc563ed207f69a47d804ba7d414a0962ddb75215748f8e362e55da876e803ae01d727e8828fe907fb0546d23562ed71d67e968ec", 0x48}, {&(0x7f0000000100)="af2e24628be08b0b5f212648f0bdf7091b60760fcf686d29294478d8b98b4cd6e37fdf7d06e9ae320a213342c53962317f9e226933dc561da87d714d2dbffaa93e72d8ccc195dec786a4b81d646bbce23688dabffcfd7d73f1c2119d19f0a65d0073899c98c80dccf376a73d5b79752e649008b5ae3c0a241b4f84d5bece808ca4726598d4ddd0e479e539abe4cfd79c1e0a92fb7f600f90da0e3b51000b74e739817c61490962afa153fcdc7a72b23be66c8ab067a3a238be46e0158216008adfadf11d73f0e4a1d3b22420d492c3c3d99d40fb5442420ec9289540fcb7bb3ba6bac010", 0xe4}, {&(0x7f0000000200)="8c6dcc470bd21135b8740ba4577a7da2c92197e6803d4ddbe2cf9ff4994595e8cd22a36cea63c93b099b15a13f362fe91bdd17cf785bb5bab55ae3f55ccc0952bec853596ba614bcc92832d4562efc7f0e42b4b35b24a0c8aba94edeeb82243b758e360313596d165f7ad6519e3e060bc321f6366ab864e5f01e80a5dd7d741fd01faf08c00677c368016f820fe76c95c6e9", 0x92}, {&(0x7f0000000380)="204f56853d750ba4860288009db07d53e40db0866e8c8f8c89be3aad14c6ac7203e37c487f4f0ddfdd7cf5e54635ac2fe36411792400773aacadc1beecfc52266e5fa3162750fe209d2aa8765df1ec444b473d896cd39e04d7bf6bbbaab77071047924a6e871266987747be707244f1116ceb46743ddd5dd140174c4d38ae1e58386144c94abe3b0b18cd7f0749fdfa633e2119159f4ed3c673faf84163cf25a45d3e467", 0xa4}, {&(0x7f0000000440)="9a8e7ff26be73456a180514f018e5f9d729d1612b49c80a56edf36a3f2f77d0d5bc4af37602bb5333b842230475bfebc0141b1fc59dc789ef0e30f52c68d9f39dd7ec9126ae4473e2728b06d015095907446ea9e48149887c24c524ea6e7e1ec88f9959ea0e81df44cdd8280d52360de3e80dd20307e0efeab13deb6eef946585022", 0x82}, {&(0x7f0000000500)="52cce311ddc0c6b2d15a0f0adc5bf0e7a758d2c61f89c112ecad9c1003b97ab5359439ada0e38e08a73006ad5ca84fc3c5e1c6aa13cbd3e2fcd16c73e2a8a3e5a0e3625540db1542b17b6ca5ca960456f642764f1c8ab5eee9c03e1ee776b01518d0665b5736c1fab91e5c4a5354c4953755b562bc346df13f4a11602d4be083363a5dc6ed0997bd04c11cd7dcd18ebb947d7552593b8df6bb4e70e17230a38081e38b788015ee17fe9bd587d8677858f7113670885f0400e7509801962a7f1efd", 0xc1}, {&(0x7f00000002c0)="ba1e", 0x2}, {&(0x7f0000000600)="2fde700d67e5ef82b3bf99dce265c8e445f25d7d98a9669b6d032ed6081c77d9bb371b8479a3e1549c7918eca52e2924024b6163bc52af66812258182a3e31c54be596572d2ba7b789379c75c3b0e43376378c7efc2b0f97b019d83ee2f1c2826fbd837c99806367bc385afcf669cb7db3d48cb0e4a8ec734335abb7c352426e8b5ef6321d55b8ab4c566638bc249592be5b4a22c07c4a8ba37259b42e03d9ee61fbeacba8349c116bf7d5bbfb4de94bb83ffa75fbca2186239901a9fabddac5de4fe91f99068b3aa7ab614012b07f2e2b2aa34b58b995e0e38f8b", 0xdb}, {&(0x7f0000000700)="d0d3912c84e2e6f5770a62c80ffe956182c3e14c8614af57ecf8d6b769539af15ef4d48dff4046ae955aefa3a8d69e859a0e5ec96defffd3cd23d85540ea2ce3f32782b79073904d45e641dce36479fb13f4e617fbcabcd9ce9688d8fd3b1ded8a28e0038d135f152f27057205676bf0ccd0fe28646069980feef5b05f4ce2c5017ac3ea7d761d4440a71f72652b8c89d9a46ff7b7191b3969815b0815dc7ccb8d2b5c", 0xa3}], 0x9, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9a71}}, @txtime={{0x18, 0x1, 0x3d, 0x6adf04ea}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}], 0xa8}, 0x80)

08:31:31 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000306ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  579.033172][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  579.038996][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0xec0}}, 0x0)

[  579.223822][ T6866] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:31 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@empty}}, {{@in6=@loopback}}}, &(0x7f0000000080)=0xe8)
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f00000000c0)=0xba, 0x4)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x4c, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffd}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xa9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000090)

08:31:31 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  579.266824][ T6866] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:31 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000506ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  579.433226][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  579.439088][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x33fe0}}, 0x0)

08:31:32 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x349000, 0x557a78b961c3d32b)
write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x21, 0x0, 0x7}}, 0x14)
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
capset(&(0x7f00000000c0)={0x19980330, r3}, &(0x7f0000000100)={0xffffffff, 0x0, 0x4, 0x8, 0x3, 0x8})
r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x28c0)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0))
close(r5)
ptrace$setregs(0xf, r3, 0x422aadb7, &(0x7f0000000200)="1a59d4f0b71d6496d8b74003b9e12b2bf7b3bb0095d65cd061d3f381dc73758c650ea654af3546c137795dea2c8b7432eb0f00b0e474db14733257726f5eb8d4f8d4dad633e4cd5ba3ec2a6bc7877c27effb61bdd499985a976b86d14827d24898ec5007608de067fe5c33cb0737a824bf1bb4978bdb0c44a73469e8020f18dd53d8f1ec89d2783425dbc344841c61e450663f9d88caffd041a9190689e52bf63fc3006d0b47590f32717e45a841d98c89144a29809d660447cfc4deecfc35d5500807fbe78bc6e25148b09af59921cefd36c362cf1b4a10fc38a972ff7a5873549a01deb30d29")
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

[  579.607212][ T6880] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:32 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  579.753220][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  579.759054][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  579.773308][ T6880] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:32 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x500a}}], 0x210, 0x0, 0x0)

08:31:32 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000a06ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x20000118}}, 0x0)

[  580.086858][ T6901] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x7ffff000}}, 0x0)

[  580.183226][ T6901] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:32 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:32 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000001006ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0xfffffdef}}, 0x0)

08:31:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000005a06ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:33 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x2}, 0x0)

08:31:33 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}}], 0x210, 0x0, 0x0)

08:31:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x3}, 0x0)

08:31:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000006706ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:33 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x4}, 0x0)

08:31:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000205ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:34 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x8}, 0x0)

08:31:34 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000209ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x300}, 0x0)

08:31:34 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:34 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f000000020bff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:34 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x210, 0x0, 0x0)

08:31:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0xffffff1f}, 0x0)

08:31:34 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f000000025aff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x2}, 0x0)

08:31:34 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:34 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000267ff00fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x3}, 0x0)

08:31:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x4}, 0x0)

08:31:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff02fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:35 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  582.674558][ T7024] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  582.682701][ T7024] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xa}, 0x0)

08:31:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff03fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  582.914205][ T7039] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  582.965326][ T7039] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff04fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:35 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000}}], 0x210, 0x0, 0x0)

08:31:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xe}, 0x0)

08:31:35 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf}, 0x0)

[  583.118470][ T7049] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  583.144725][ T7049] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff05fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  583.302766][ T7062] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x60}, 0x0)

08:31:35 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  583.346382][ T7062] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff06fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf0}, 0x0)

[  583.545428][ T7072] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  583.568979][ T7072] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:36 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff07fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x300}, 0x0)

[  583.794126][ T7082] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  583.802253][ T7082] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  583.913174][    C0] net_ratelimit: 22 callbacks suppressed
[  583.913181][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  583.924678][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  583.930497][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  583.936317][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:36 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}], 0x210, 0x0, 0x0)

08:31:36 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xa00}, 0x0)

08:31:36 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff0afd4354c007110000f3050100080001000104231cc88c37", 0x1f)

[  584.089149][ T7095] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  584.114900][ T7095] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xe00}, 0x0)

08:31:36 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff0efd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:36 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf00}, 0x0)

[  584.341373][ T7108] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  584.380406][ T7108] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:37 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:37 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff0ffd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x3f00}, 0x0)

[  584.615400][ T7121] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:37 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  584.668271][ T7121] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  584.873188][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  584.879042][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:37 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x210, 0x0, 0x0)

08:31:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x4000}, 0x0)

08:31:37 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff48fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:37 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x4041}, 0x0)

[  585.033167][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  585.039014][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  585.040791][ T7141] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  585.068619][ T7141] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:37 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff4cfd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:37 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x4140}, 0x0)

[  585.273242][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  585.279091][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:37 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff60fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x6000}, 0x0)

08:31:38 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff68fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:38 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:38 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}], 0x210, 0x0, 0x0)

08:31:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf000}, 0x0)

08:31:38 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff6cfd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:38 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:38 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff74fd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:38 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x34000}, 0x0)

08:31:38 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:38 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff7afd4354c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x400300}, 0x0)

08:31:38 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/251, 0xfb}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/200, 0xc8}], 0x7, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080))
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000780)={'icmp6\x00'}, &(0x7f00000007c0)=0x1e)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000680))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x8)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0x7, 0x34324948, 0x4, 0x6, 0x2, @stepwise={{0x0, 0x4}, {0x9}, {0x62b, 0x457}}})

08:31:38 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:39 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100}}], 0x210, 0x0, 0x0)

08:31:39 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd0954c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf0ffff}, 0x0)

08:31:39 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:39 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000000c0))
prlimit64(0x0, 0x756cf7a5a2ec06e, &(0x7f0000000080)={0x8, 0x37e}, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:31:39 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd5a54c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x1000000}, 0x0)

08:31:39 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/de\xfb\xff\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)

08:31:39 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:39 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd6754c007110000f3050100080001000104231cc88c37", 0x1f)

08:31:39 executing program 5:
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@broadcast, @dev, @multicast2}, &(0x7f0000000040)=0xc)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x1c1800, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x2000000}, 0x0)

08:31:40 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x210, 0x0, 0x0)

08:31:40 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd430ac007110000f3050100080001000104231cc88c37", 0x1f)

08:31:40 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x3000000}, 0x0)

08:31:40 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x102, 0x0)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000001c0)=0x8)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000100)=0xe8)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r4, @remote, @multicast2}, 0xc)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

[  587.997937][ T7306] QAT: Invalid ioctl
[  588.024646][ T7307] validate_nla: 9 callbacks suppressed
[  588.024656][ T7307] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x4000000}, 0x0)

[  588.132856][ T7307] __nla_validate_parse: 9 callbacks suppressed
[  588.132865][ T7307] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:40 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/\x7f\x03Oi\xfb\xa1ontrol\x00', 0x84000, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x401, 0x4000)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000040)={0x400, 0x0, 'client0\x00', 0xffffffff80000000, "1d7429d2b200e6ed", "de1762c3862ea169cb21ea8569ce00686f60be822970c8ece6666edb06439a99", 0xf64, 0x9})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:40 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:40 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd435ac007110000f3050100080001000104231cc88c37", 0x1f)

08:31:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xa000000}, 0x0)

[  588.496591][ T7331] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  588.551148][ T7331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:41 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xe000000}, 0x0)

08:31:41 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x210, 0x0, 0x0)

08:31:41 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4367c007110000f3050100080001000104231cc88c37", 0x1f)

[  589.011910][ T7351] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  589.033177][    C0] net_ratelimit: 18 callbacks suppressed
[  589.033186][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  589.044711][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf000000}, 0x0)

[  589.097869][ T7351] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:41 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  589.203192][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  589.209078][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:41 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd43543407110000f3050100080001000104231cc88c37", 0x1f)

08:31:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x3f000000}, 0x0)

[  589.398706][ T7364] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  589.433171][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  589.439004][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  589.488309][ T7364] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:42 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x40000000}, 0x0)

08:31:42 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd43547807110000f3050100080001000104231cc88c37", 0x1f)

[  589.833204][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  589.839042][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  589.868307][ T7382] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  589.923182][ T7382] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x40410000}, 0x0)

08:31:42 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:42 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}}], 0x210, 0x0, 0x0)

08:31:42 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c004110000f3050100080001000104231cc88c37", 0x1f)

[  590.153198][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  590.159073][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x60000000}, 0x0)

[  590.244699][ T7404] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  590.353719][ T7404] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:42 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x9effffff}, 0x0)

08:31:43 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c010110000f3050100080001000104231cc88c37", 0x1f)

08:31:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf0ffffff}, 0x0)

08:31:43 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  590.615727][ T7424] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  590.651543][ T7424] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:43 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c05a110000f3050100080001000104231cc88c37", 0x1f)

08:31:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xfffff000}, 0x0)

[  590.806504][ T7436] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  590.844351][ T7436] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:43 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:43 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c067110000f3050100080001000104231cc88c37", 0x1f)

[  591.032287][ T7448] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  591.059955][ T7448] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:43 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x210, 0x0, 0x0)

08:31:43 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c0075a0000f3050100080001000104231cc88c37", 0x1f)

08:31:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f}, 0x0)

08:31:43 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:43 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r5, 0x0)
unshare(0x40000000)
r6 = accept(r5, 0x0, 0x0)
write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0))
preadv(r8, &(0x7f00000001c0), 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000000)="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", 0xfd, 0x20008000, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)

08:31:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff9e}, 0x0)

[  591.279375][ T7461] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  591.305796][ T7461] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:43 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007670000f3050100080001000104231cc88c37", 0x1f)

08:31:44 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  591.538369][ T7466] IPVS: ftp: loaded support on port[0] = 21
08:31:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xfffffff0}, 0x0)

08:31:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110200f3050100080001000104231cc88c37", 0x1f)

08:31:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x40030000000000}, 0x0)

08:31:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110300f3050100080001000104231cc88c37", 0x1f)

08:31:44 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x210, 0x0, 0x0)

08:31:44 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf0ffffffffffff}, 0x0)

08:31:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110400f3050100080001000104231cc88c37", 0x1f)

[  592.390459][ T7466] IPVS: ftp: loaded support on port[0] = 21
08:31:45 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110500f3050100080001000104231cc88c37", 0x1f)

08:31:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x100000000000000}, 0x0)

08:31:45 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:45 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x1, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:45 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110600f3050100080001000104231cc88c37", 0x1f)

08:31:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x200000000000000}, 0x0)

[  593.118304][ T7554] validate_nla: 5 callbacks suppressed
[  593.118316][ T7554] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:45 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  593.192574][ T7554] __nla_validate_parse: 5 callbacks suppressed
[  593.192583][ T7554] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x300000000000000}, 0x0)

08:31:46 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400e0000}}], 0x210, 0x0, 0x0)

08:31:46 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110700f3050100080001000104231cc88c37", 0x1f)

08:31:46 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x400000000000000}, 0x0)

[  593.606714][ T7573] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  593.681574][ T7573] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:46 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110a00f3050100080001000104231cc88c37", 0x1f)

08:31:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xa00000000000000}, 0x0)

08:31:46 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  594.040113][ T7590] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  594.108057][ T7590] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xe00000000000000}, 0x0)

08:31:46 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110e00f3050100080001000104231cc88c37", 0x1f)

[  594.313198][    C0] net_ratelimit: 22 callbacks suppressed
[  594.313207][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  594.324723][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  594.330566][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  594.336407][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:46 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  594.512564][ T7607] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:47 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x500a0000}}], 0x210, 0x0, 0x0)

08:31:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf00000000000000}, 0x0)

[  594.573334][ T7607] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:47 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110f00f3050100080001000104231cc88c37", 0x1f)

08:31:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x3f00000000000000}, 0x0)

08:31:47 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  594.914024][ T7623] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  595.022839][ T7623] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:47 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007114800f3050100080001000104231cc88c37", 0x1f)

08:31:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x4000000000000000}, 0x0)

[  595.273201][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  595.279025][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  595.350229][ T7638] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:48 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  595.423284][ T7638] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  595.433222][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  595.439027][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:48 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007114c00f3050100080001000104231cc88c37", 0x1f)

08:31:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x4041000000000000}, 0x0)

08:31:48 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e0000}}], 0x210, 0x0, 0x0)

[  595.673207][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  595.679119][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  595.721853][ T7657] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  595.793232][ T7657] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x6000000000000000}, 0x0)

08:31:48 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:48 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007116000f3050100080001000104231cc88c37", 0x1f)

08:31:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x9effffff00000000}, 0x0)

[  596.024495][ T7671] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  596.076194][ T7671] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xf0ffffff00000000}, 0x0)

08:31:48 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:48 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007116800f3050100080001000104231cc88c37", 0x1f)

08:31:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffff7f00000000}, 0x0)

[  596.338974][ T7686] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  596.370657][ T7686] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:49 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007116c00f3050100080001000104231cc88c37", 0x1f)

08:31:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xffffffff00000000}, 0x0)

08:31:49 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:49 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x210, 0x0, 0x0)

08:31:49 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptix\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x84100, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x27, <r3=>0x0, 0x2})
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000000c0)={0x1000, r3, 0x1})
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x9, <r4=>r3, 0x10001, 0x9e})
ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x800, r4})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x8930, 0x1, 0x5, 0xa, 0x7f, 0x7, 0x7, 0x800, 0xfd})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  596.643996][ T7701] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  596.675904][ T7701] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:49 executing program 5:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x5b2440, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1ec)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x482b01, 0x0)
mq_open(&(0x7f00000001c0)='stat\x00', 0x1000, 0x8, &(0x7f0000000200)={0x4, 0x4, 0xfffffffffffffffc, 0x945, 0x4, 0x3, 0xb4, 0x3f})
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101800, 0x0)
ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000040))
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
fcntl$setpipe(r0, 0x407, 0x4)
read$char_usb(r0, &(0x7f0000000980)=""/12, 0xc)
preadv(r8, &(0x7f00000017c0), 0x199, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, 0xffffffffffffffff)
umount2(&(0x7f0000000940)='./file0\x00', 0x4)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, r7)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0xb2)
vmsplice(r1, &(0x7f0000000880)=[{&(0x7f00000002c0)="eb3b12c5db5c4fef9d03eeeff5d96c9374c07befd1fdcf9a7504ac7ffe7a7a81da48596f65b3eb65cc649b13ff15ef3b5ce9e41ae72c70d00c", 0x39}, {&(0x7f0000000300)="6904def9d2949365e0af714980dc689556ce280e0c3d0eb3bda59dd66e57e6772481df09c39d2cb8db2821ff8a159f71ac8adb49b5fbe7412568d7242f18562844e9af7b73d0c6144e939cd13a280a9e358694500df00b4af34d264c825f3768da3391d009f90f713497440c4dbb81a063", 0x71}, {&(0x7f0000000380)="48faad95acea0375e917a715684ffce9ef9f659752efb3582d05c129f85fb8a95e5f4338370297dc417ca2d3003da4ea24608ab99a6032ef336a1065d9805980d8c02de3a5aa9683b0ca89879343934168bcadda50df845bde88c7cf34b604de9ca818345fcc4a8aaa30e4f855e09d9ed1c3eb4020051748315bfed4c0d39216d0a335651713e18807b2c2372eeec061317a1e8cac6b0204e1cac9b31f09a8199383dd73626ff227f87177af2b18c3bfb13e16f4f966af398402800e79c6ebd2a75e110c33d1af6641151c2b4cf7ba7d9b9089554a1664ba42db80c2fe84d08c539fd8ef365f0b6b3c9831", 0xeb}, {&(0x7f0000000480)="72bacc1d8e5870a281c917263db1f8745996cb8c7940d5d64781a1ec1c398ddba12a1905794e6849e99619eca85425944f11279fc60ad8fe0965a87c3d5f63d444ca7285f540043cd3194de6d1a3fa269dc8abfd85729dead066eb123ac9189e15e327feb7794f4f0ca7b0270129a90046f5ba5a7855d4294c7f0373e87a2e05", 0x80}, {&(0x7f0000000500)="e983352ef3b84c6464ee71218cdeb71b9d9bff7deb9ea1ca1a4bde4d343d8e90653ea71bab48cdfb0e4df9165676bc2be737922b5ef62a7415b5b63ccf429454a549b9cfb25e902be7606c8897ab387f2c2de8f1c800253e31827f89f448c61b01ce77bf1e377ccadc291c413b33176780ab7081bbe671a41a4ce9c6dc7ea221e705b99ea8a88c47a42e88c3718f", 0x8e}, {&(0x7f00000005c0)="d04bfd0e78f021fe9d6133d77d1c33f7455568f6d6d197405dc9c46924562500479eb73f6e18ae7015ed3ed410c3e2eeb3159e75d0438eb21b73e6f82552bb7dd0e98e2a885579844eabd68bf7a6c2ba6eba09e2f61d216cb39ef488895eded494636452c5f5bf573c6978a6e935941ff2ca4488817984c49ce1d9e6aece79d221bb38c6cffac90638efaec6770217a556365fafdad10bda7f245ea6b5164ebd48e352b12ef9988596e03ca997df78d9c18871b0b9d5b23be5e96d40aedf3c6cdaa8851a3c09c00fdfb54d25367dfc6b6d4dee091131813c054252", 0xdb}, {&(0x7f00000006c0)="695066e58aa1a73e2e8d13570a019c6491850d57dc84c0c83c", 0x19}, {&(0x7f0000000700)="f26ff61126fe5a672891d0a1fdbf5359a0873040bd0ecfcab2ad47fdf2a10d17281eaa257b45037826185d17e7b36ca9c17fe7c0e7ae5591b41cfab1f42f3313710e616363bbdeea74aae00cdcc0a765f358b2f16f49d5408b10f4a07cb73647203021c2323bfb4491506497", 0x6c}, {&(0x7f0000000780)="417996b2a2645722fcad4de9dee268ac61fec8b711d45b2acac94eed2af5c22400b61db120536f1325f70be01ce09aaa32164b8e22009d18f4203016c5e446a497c27489dc15063798335e59df2199ae40e1829f513af12f95b2bd2fbc489bb613eedd5a3dc8c0a2089c3e66a06eaf8001422bdc521a986aea398caadb4bcc1a527790aa9b7ea8f88191d36ea24d7c8629ad81bdc84bc91839b6d2ae35ddf2240a3c35034ab6", 0xa6}, {&(0x7f0000000840)="198722fb885d2cdcf14cc0b06ceaf6c193b2d2852e7420960c71e5c62649bcc3975e9527f310d0ade4f4", 0x2a}], 0xa, 0x1f)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000240)={{0xc, @empty, 0x4e23, 0x4, 'nq\x00', 0x13, 0xfffe, 0x10}, {@local, 0x4e24, 0x12000, 0xba396c1, 0x4, 0xd5c}}, 0x44)

08:31:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0xfffffffffffff000}, 0x0)

08:31:49 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007117400f3050100080001000104231cc88c37", 0x1f)

08:31:49 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80000000, 0x410000)
bind$netrom(r4, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040))
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
r5 = pidfd_open(r2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB="090019402e3687e030b9c9ddd31b953dc732c67f668a3115"])

08:31:49 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:49 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007117a00f3050100080001000104231cc88c37", 0x1f)

08:31:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x2}, 0x0)

08:31:49 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x12)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000000)={0x3})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:31:50 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, r3, 0xa01, 0x0, 0x0, {0x12}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x20004036)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:50 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711f000f3050100080001000104231cc88c37", 0x1f)

08:31:50 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:50 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x210, 0x0, 0x0)

08:31:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x3}, 0x0)

08:31:50 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/l/o\x1c\xeb\t\xac\a&R\xe2l\x00', 0x202080, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1e, @bcast, @rose={'rose', 0x0}, 0x8, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

08:31:50 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110003f3050100080001000104231cc88c37", 0x1f)

08:31:50 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x4}, 0x0)

08:31:51 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})

[  598.692812][ T7844] validate_nla: 3 callbacks suppressed
[  598.692822][ T7844] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  598.803405][ T7844] __nla_validate_parse: 3 callbacks suppressed
[  598.803415][ T7844] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:51 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0)
ioctl$RTC_VL_CLR(r2, 0x7014)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:31:51 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}], 0x210, 0x0, 0x0)

08:31:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xa}, 0x0)

08:31:51 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007115603f3050100080001000104231cc88c37", 0x1f)

[  599.433175][    C0] net_ratelimit: 18 callbacks suppressed
[  599.433185][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  599.444700][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:52 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x400000, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000040)='},\x00', 0x3, 0x2)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

[  599.593170][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  599.599066][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:52 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110005f3050100080001000104231cc88c37", 0x1f)

08:31:52 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  599.833177][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  599.839002][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xe}, 0x0)

[  600.078825][ T7904] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:52 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000}}], 0x210, 0x0, 0x0)

[  600.203666][ T7904] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  600.233205][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  600.239090][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:31:52 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x40080, 0x128)
clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r7, &(0x7f00000017c0), 0x199, 0x0)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r9, &(0x7f00000017c0), 0x199, 0x0)
r10 = openat(r9, &(0x7f0000000300)='./file0\x00', 0x8000, 0x8)
ioctl$TIOCGPKT(r10, 0x80045438, &(0x7f0000000380))
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
r12 = dup3(r8, r11, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r11, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="f81a923a", @ANYRES32=0x0, @ANYRES32=<r13=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={r13, @in6={{0xa, 0x4e21, 0x2, @local, 0x100}}, 0x6, 0x1, 0x6, 0xffffffff, 0x10}, &(0x7f00000002c0)=0x98)
write$sndseq(r4, &(0x7f0000000140)=[{0x6f, 0x0, 0x7f, 0x7, @time={r5, r6+10000000}, {0x1f, 0x9}, {0x1, 0x2}, @result={0x1, 0x6}}, {0x20, 0x3c, 0x1c, 0x8, @tick=0x1, {0x6, 0x1}, {0xfb, 0x80}, @addr={0xa2, 0x9}}, {0x5, 0x14, 0x0, 0x0, @time={0x77359400}, {0x9, 0x3f}, {0x9, 0x1}, @ext={0x7b, &(0x7f0000000080)="80f7df279cadef63290aee69fea85c7cf12b6b1e7db801ae2a600319ebcc4a288d6f40d1e8a6c9901614a9cfcd8581bb7388948f4f7a45263cbd02418eb33148cde0deaad0ba1d42b234e7f415783eca41e3f380eb51d56f50535065e7614e9f5708aa8e875c97a254ca79d1a6641f0ffb55d03d1cc08d9e721dfc"}}], 0x90)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1)

[  600.553185][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  600.559031][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:53 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110006f3050100080001000104231cc88c37", 0x1f)

08:31:53 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:53 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1, 0x2, 0x1, 0x8}, {0x7, 0x0, 0x40, 0x7}, {0x6, 0xed, 0x1, 0x3}, {0x6, 0x7f, 0x1, 0xa6e2}, {0x3, 0x7, 0x1, 0x4a1}, {0x40, 0x91, 0xfa, 0x5c3db2b9}, {0x9, 0xff, 0x31, 0x10001}]})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x43, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0xfeff, 0xc89, 0x8, 0xd3e3, 0x12, 0x3, 0x3, 0xff, 0x63, 0x2})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0xb8, 0x1}, {0x101, 0x5}]}, 0x14, 0x6)
r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
getsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4)

08:31:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf}, 0x0)

[  601.195763][ T7947] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  601.368978][ T7947] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:54 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x60}, 0x0)

08:31:54 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x210, 0x0, 0x0)

08:31:54 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110007f3050100080001000104231cc88c37", 0x1f)

08:31:54 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x1, 0xb3d, 0x4, 0x7, 0x4, 0x73d, 0x4, 0x0, 0x8, 0x3, 0x0, 0x0, 0x1, 0xfffffe57, 0x100, 0x294, 0x6, 0x80000001, 0x9, 0x8, 0x49, 0x9, 0x7f, 0x68b4, 0x7, 0x101, 0x4, 0x0, 0x3, 0x40, 0x4, 0x4]})
write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0xb, 0x3, {0x8}}, 0x18)

08:31:54 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  602.197117][ T7982] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:31:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf0}, 0x0)

[  602.363285][ T7982] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:55 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0xc386, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:55 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711000af3050100080001000104231cc88c37", 0x1f)

08:31:55 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x210, 0x0, 0x0)

[  603.127239][ T8081] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  603.443034][ T8081] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7fffffff)

08:31:56 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x300}, 0x0)

08:31:56 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r1, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)

08:31:56 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711000ef3050100080001000104231cc88c37", 0x1f)

08:31:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xa00}, 0x0)

08:31:57 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000}}], 0x210, 0x0, 0x0)

[  604.713196][    C0] net_ratelimit: 22 callbacks suppressed
[  604.713206][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  604.724806][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  604.730653][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  604.736474][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:57 executing program 5:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x9, 0x9, 0x8, 0x2, 0x4})
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
write(r0, &(0x7f0000000080)="02fc6d89bb32a123055d30972ea43cd23f9ff430ed79f52396ed115349768fd21e2b90e8ea5473cbed39092494f71d280d8eeb7cce3b30057ccca1f49296137eb61b83600bf56547f4623d37b679a867ddf8adf8ab827c73733f5134e5f4ca8e42b3a6e83697bf49baa4a0f148fd97023b5ff27baebfe5cfada4484d59625ea63741a8b1b6717de5088c8049e28067a0f7f04d73d9a67f2a158ce8716ebf389f5d6297d1c249e4f4c50b79e05c4112a94bec98d97836577dd333eb674fb0926453e64fc2786de08d0bb3d3663bcd3b60e84ea517a0ebe093f08938ccd1326a69a8412f7c85c5bd1f0dae6948445906502e0d457df97f2ca3e6", 0xf9)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

08:31:57 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xe00}, 0x0)

08:31:57 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711000ff3050100080001000104231cc88c37", 0x1f)

[  605.635043][ T8202] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  605.673166][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  605.679027][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  605.833229][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  605.839114][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  605.854365][ T8202] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:31:58 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10c00, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:31:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf00}, 0x0)

[  606.073224][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  606.079061][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:31:58 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x210, 0x0, 0x0)

08:31:58 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:31:58 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mISDNtimer\x00', 0x100, 0x0)
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/192}, {&(0x7f0000000140)=""/5}, {&(0x7f0000000180)=""/111}, {&(0x7f0000000200)=""/235}], 0x1000000000000174, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:31:58 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110020f3050100080001000104231cc88c37", 0x1f)

08:31:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x3f00}, 0x0)

08:31:59 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711003ff3050100080001000104231cc88c37", 0x1f)

08:31:59 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0x1000, 0x8, 0x80000000, 0x5, 0x200})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:00 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x210, 0x0, 0x0)

08:32:00 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x2, 0x9})
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
set_thread_area(&(0x7f0000000040)={0x7fff, 0x100000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

[  607.725982][ T8366] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  607.883466][ T8366] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x4000}, 0x0)

08:32:00 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:01 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110040f3050100080001000104231cc88c37", 0x1f)

08:32:01 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
recvfrom$x25(r0, &(0x7f0000000000)=""/157, 0x9d, 0x100, &(0x7f00000000c0)={0x9, @null='               \x00'}, 0x12)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

08:32:01 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400e000000000000}}], 0x210, 0x0, 0x0)

[  609.116162][ T8422] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x4041}, 0x0)

[  609.378037][ T8422] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:02 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  609.833187][    C0] net_ratelimit: 18 callbacks suppressed
[  609.833197][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  609.844717][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:02 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110048f3050100080001000104231cc88c37", 0x1f)

08:32:02 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
keyctl$clear(0x7, 0xfffffffffffffffc)

[  609.993180][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  609.999055][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
iopl(0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x4140}, 0x0)

[  610.233193][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  610.239027][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  610.333342][ T8456] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  610.601381][ T8456] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  610.633186][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  610.639003][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:03 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x500a000000000000}}], 0x210, 0x0, 0x0)

08:32:03 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x6000}, 0x0)

08:32:03 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/pev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

[  610.953229][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  610.959067][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:03 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711004cf3050100080001000104231cc88c37", 0x1f)

[  611.531875][ T8497] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf000}, 0x0)

[  611.823928][ T8497] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:04 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7f, 0x12400)
ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@bcast, @bcast, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:32:04 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:04 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e000000000000}}], 0x210, 0x0, 0x0)

08:32:04 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:04 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110356f3050100080001000104231cc88c37", 0x1f)

08:32:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x34000}, 0x0)

08:32:05 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  613.094196][ T8555] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  613.323469][ T8555] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:06 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x210, 0x0, 0x0)

08:32:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x400300}, 0x0)

08:32:06 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110060f3050100080001000104231cc88c37", 0x1f)

08:32:06 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x4e20, 0xbcb3, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x67, 0x0, r5}, {0x4, 0x8, 0x3, 0x4, 0x0, 0xffff, 0x0, 0xffffffff}, {0x37, 0x90, 0x975, 0x17e}, 0x2001000, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x0, 0x401, 0x1ced, 0x1}}, 0xe8)
r6 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x3, 0x1a840)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r7=>0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x3c)
ptrace$cont(0x18, r8, 0x0, 0x0)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r8, 0x0, 0x0)
r9 = getpgrp(r8)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8)
getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=<r11=>0x0)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000001c0))
r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000001c0))
r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000001c0))
r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r15, 0x5423, &(0x7f00000001c0))
r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r16, 0x5423, &(0x7f00000001c0))
r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r17, 0x5423, &(0x7f00000001c0))
r18 = creat(&(0x7f0000000780)='./file0\x00', 0x20)
sendmsg$netlink(r4, &(0x7f0000000880)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000380)={0x2d4, 0x3b, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x5e, @ipv4=@rand_addr=0x6}, @typed={0x8, 0x5f, @u32=0x3}, @typed={0x8, 0x8f, @uid=r5}, @generic="3f24bfa0488bc654fcac724cddd73f9953aabfbb09f2ea371a0eb2fedb3bb52de97661b4ef1d43c89ce9ca2ceafd62dc5474d35f844b746e959adce6e1c7b49ce2a36339b13bbdd21625dfac126586d7a88193d91c379bccbb4718190a1caec1335db7421c0cab213167a3087d9115e08a1448f0842ac9", @typed={0x14, 0x5d, @str='/,procppp1&}\x00'}, @nested={0x218, 0x24, [@typed={0x8, 0x6f, @pid}, @typed={0x4, 0x16}, @typed={0x8, 0x73, @fd=r6}, @generic="849957df205e7a73a2eb5dde2564ee76a30343863be7af56078fe345849cb90d256ccedef8317433459f7dd91e3285af1ee824b522d5c31a1a2c52bea68fd0ca40b7d17cbbd603f9a067eb9eca37d301c64e9e85715ed60bcd50e0aa26229d682a87832b121aeeda15fa01a4b48d80d4830bf600b7fb3595b1a07fda94935f896cbc038b64610cbf5d97c770", @typed={0x14, 0x6f, @ipv6=@rand_addr="b9c0eadec9a2035aae0c0f097ee3c88f"}, @generic="0c0db1740149651167794c6e040573b2f6b7603e709abaadbf9952274765bae9af9869f80a2873a794", @typed={0x8, 0x87, @uid=r7}, @generic="0cd3162f8be1f278fdec48f236905b161e2d4f629d57d783656e33b6ce5cb0621fc707dc7db7d2e97411d3cc6e34bc18f83f7e8e4e3efd5f3af11057c4bfeaf505895fabec821fc1f24c9c67306d10968a13f3dc8b2d108baef79249ce702af7af03974aa24d37525b2412709ef460a47053feea1d1785919b7b17da26d4", @generic="5d8c91e858504d0366193ab9a1ed3f53d4d1307e43dd8e3bcee85c603be3867e97a37a6e0166a01639a8d4f87c600cfe0c9f2b42f3d5b760a0c92d944a63141672ef49e9f5ea4698657140b762bd486e47176f45be79dfd245ac86078b12eefb0b2be1d2c7cab600e97ac2712bcba414193c8f16af11cd264c0d9bbf110095ac44d03acc46d86ab016c9b6156078e70acda6660c6aaed4b591d50089daa17eae35b741eeb0a6", @typed={0x8, 0x2c, @fd=r0}]}, @typed={0x8, 0x5, @ipv4=@empty}]}, 0x2d4}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x28, 0x1, 0x1, [r12, r2, r3, r13, r14, r15]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r16, r17, 0xffffffffffffffff, r18]}}], 0x88, 0x12000}, 0x26000095)
getpeername$inet(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
getsockopt$inet6_int(r2, 0x29, 0x7fb243b019bed6aa, &(0x7f0000000000), &(0x7f0000000040)=0x4)

08:32:06 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  614.365791][ T8684] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  614.543179][ T8684] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  615.113191][    C0] net_ratelimit: 22 callbacks suppressed
[  615.113199][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  615.124740][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  615.130594][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  615.136437][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:07 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110068f3050100080001000104231cc88c37", 0x1f)

08:32:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf0ffff}, 0x0)

08:32:08 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='oHev/p}^x\x00', 0x28341, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x80000000, 0x0, 0x9, 0xff, 0x5, 0x6})
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, "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", 0x1000}, 0x1006)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x20, 0x4080)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20)

08:32:08 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)

08:32:08 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

[  615.790398][ T8846] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  615.993329][ T8846] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  616.073199][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  616.079060][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  616.233183][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  616.239003][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x1000000}, 0x0)

[  616.473235][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  616.479123][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:09 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711006cf3050100080001000104231cc88c37", 0x1f)

08:32:09 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5649, 0x0, 0x0, 0x7}, {0x140, 0x5, 0x6, 0x1f}, {0x400, 0x1, 0x0, 0x3}]}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x101, 0x200)
bind$can_raw(r2, &(0x7f00000000c0), 0x10)

08:32:09 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x210, 0x0, 0x0)

[  617.084123][ T8877] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x2000000}, 0x0)

[  617.303288][ T8877] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:10 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:10 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110074f3050100080001000104231cc88c37", 0x1f)

08:32:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x3000000}, 0x0)

[  618.319556][ T8920] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  618.493507][ T8920] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:11 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:11 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711007af3050100080001000104231cc88c37", 0x1f)

08:32:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x4000000}, 0x0)

[  619.334918][ T9047] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  619.467360][ T9047] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:12 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r2)

08:32:12 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x210, 0x0, 0x0)

08:32:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xa000000}, 0x0)

[  620.233174][    C0] net_ratelimit: 18 callbacks suppressed
[  620.233182][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  620.244774][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  620.393189][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  620.399031][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  620.633188][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  620.639104][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:13 executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x7, &(0x7f0000000040))
writev(r0, &(0x7f0000000000), 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x10000, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x7)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)

08:32:13 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c0071100f0f3050100080001000104231cc88c37", 0x1f)

08:32:13 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(0xffffffffffffffff)

08:32:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xe000000}, 0x0)

[  620.939304][ T9096] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  621.033190][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  621.039062][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  621.082318][ T9096] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  621.353224][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  621.359097][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:14 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110002f3050100080001000104231cc88c37", 0x1f)

08:32:14 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}], 0x210, 0x0, 0x0)

08:32:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf000000}, 0x0)

08:32:14 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(0xffffffffffffffff)

[  621.894640][ T9133] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  622.010264][ T9133] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:15 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110003f3050100080001000104231cc88c37", 0x1f)

08:32:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x3f000000}, 0x0)

[  622.828375][ T9254] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:15 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x20000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

[  623.053217][ T9254] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:15 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
syz_emit_ethernet(0x5, &(0x7f0000001600)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRES64, @ANYRES32=r0, @ANYRES16=r0], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(0xffffffffffffffff)

08:32:15 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa50}}], 0x210, 0x0, 0x0)

08:32:15 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110004f3050100080001000104231cc88c37", 0x1f)

08:32:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x40000000}, 0x0)

08:32:16 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_dccp_int(r1, 0x21, 0x18, &(0x7f0000000000)=0x5, 0x4)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1, 0x0)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x9, 0xfd, 0x8000, 0x9e7, 0x2})
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x80000000)
r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x8)
write$binfmt_script(r6, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'mime_type,securitymime_type*'}, {0x20, 'stat\x00'}, {0x20, '%'}, {}, {}, {0x20, '/proc/capi/capi20\x00'}], 0xa, "1c9b249600c588623e04bcbabd0147614ce2f07b2601b2cf60a65253fcebadf2f1c3df6361282d6b7392f3b0cb6dd43f93d7d23c1a7f1eb67b5c601aea96ca83e094c8082f51070758e706b639461066591c5e46e9201f32943add2cdfbd7b44fda7609d770477c43b3d9a064c2e3cea761d4c812637bb59bc074312d2b40908edb4"}, 0xc7)
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400000, 0x0)
name_to_handle_at(r7, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x79, 0x2, "bafa104d05aac5322d03bb86fd0610e3f34b2a18c10a08d274dc7c991fdcb44cdab8fc79e56195f02914874202609751ceca1e1a08e233a0e24c4640f28dec77e3898b9d9ecdf77f9be34a0ece7eface81610dd3bea02f5c6f8bcebd890a83580800bbbacb0295f7337507a46309c1edfe"}, &(0x7f0000000380), 0x37c902a729ddea7d)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff)

[  623.769604][ T9378] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:16 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
accept4(r0, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0xfffffffe, 0x2000800000080000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r1)

[  623.931521][ T9378] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:16 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110005f3050100080001000104231cc88c37", 0x1f)

08:32:16 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40}}], 0x210, 0x0, 0x0)

08:32:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x40410000}, 0x0)

08:32:17 executing program 3:
r0 = socket$packet(0x11, 0x4, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r1)

[  624.664596][ T9522] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  624.797927][ T9522] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:17 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110006f3050100080001000104231cc88c37", 0x1f)

08:32:17 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0xd6f3ff74a6dacde3, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

08:32:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x60000000}, 0x0)

[  625.420374][ T9548] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  625.513239][    C0] net_ratelimit: 22 callbacks suppressed
[  625.513248][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  625.524935][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  625.530785][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  625.536611][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:18 executing program 3:
socket$packet(0x11, 0x4, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  625.573262][ T9548] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:18 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec0}}], 0x210, 0x0, 0x0)

08:32:18 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110007f3050100080001000104231cc88c37", 0x1f)

08:32:18 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x9effffff}, 0x0)

[  626.300197][ T9574] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  626.374195][ T9574] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  626.473198][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  626.479242][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  626.633183][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  626.639097][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:19 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711000af3050100080001000104231cc88c37", 0x1f)

[  626.873208][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  626.879334][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf0ffffff}, 0x0)

08:32:19 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  627.005877][ T9592] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:19 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}}], 0x210, 0x0, 0x0)

[  627.113997][ T9592] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:19 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711000ef3050100080001000104231cc88c37", 0x1f)

08:32:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xfffff000}, 0x0)

08:32:20 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  627.659542][ T9612] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  627.744557][ T9612] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xffffff7f}, 0x0)

08:32:20 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711000ff3050100080001000104231cc88c37", 0x1f)

08:32:20 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:20 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x210, 0x0, 0x0)

[  628.324102][ T9632] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xffffff9e}, 0x0)

[  628.369141][ T9632] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xfffffff0}, 0x0)

08:32:21 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110048f3050100080001000104231cc88c37", 0x1f)

[  628.814067][ T9653] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:21 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  628.909705][ T9653] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x40030000000000}, 0x0)

08:32:21 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711004cf3050100080001000104231cc88c37", 0x1f)

08:32:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

08:32:21 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x210, 0x0, 0x0)

[  629.311209][ T9673] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:21 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  629.418210][ T9673] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110060f3050100080001000104231cc88c37", 0x1f)

08:32:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x100000000000000}, 0x0)

08:32:22 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  629.798585][ T9694] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x200000000000000}, 0x0)

[  629.853876][ T9694] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110068f3050100080001000104231cc88c37", 0x1f)

08:32:22 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x300000000000000}, 0x0)

[  630.244448][ T9708] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  630.273177][ T9708] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:22 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400e}}], 0x210, 0x0, 0x0)

08:32:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711006cf3050100080001000104231cc88c37", 0x1f)

08:32:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x400000000000000}, 0x0)

08:32:23 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  630.633164][    C0] net_ratelimit: 18 callbacks suppressed
[  630.633172][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  630.645002][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  630.656649][ T9732] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  630.695782][ T9732] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xa00000000000000}, 0x0)

[  630.793160][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  630.799109][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110074f3050100080001000104231cc88c37", 0x1f)

08:32:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xe00000000000000}, 0x0)

[  630.960968][ T9747] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:23 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  631.013251][ T9747] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  631.033188][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  631.039131][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c00711007af3050100080001000104231cc88c37", 0x1f)

08:32:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf00000000000000}, 0x0)

[  631.206225][ T9760] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  631.263231][ T9760] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:23 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:23 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500a}}], 0x210, 0x0, 0x0)

08:32:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x3f00000000000000}, 0x0)

08:32:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3060100080001000104231cc88c37", 0x1f)

[  631.433166][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  631.439033][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  631.496162][ T9781] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x4000000000000000}, 0x0)

[  631.552396][ T9781] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3090100080001000104231cc88c37", 0x1f)

08:32:24 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x2af)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x4041000000000000}, 0x0)

[  631.753214][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  631.759076][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  631.789799][ T9793] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  631.826815][ T9793] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f35a0100080001000104231cc88c37", 0x1f)

08:32:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x6000000000000000}, 0x0)

08:32:24 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3670100080001000104231cc88c37", 0x1f)

08:32:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

08:32:24 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}}], 0x210, 0x0, 0x0)

08:32:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050200080001000104231cc88c37", 0x1f)

08:32:24 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

08:32:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050300080001000104231cc88c37", 0x1f)

08:32:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

08:32:25 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050400080001000104231cc88c37", 0x1f)

08:32:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xffffffff00000000}, 0x0)

08:32:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050500080001000104231cc88c37", 0x1f)

08:32:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0xfffffffffffff000}, 0x0)

08:32:25 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:25 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x210, 0x0, 0x0)

08:32:25 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x0, 0x5, 0xb4, 0x2, 0x1})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x441002, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x3dce848, 0x200)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400000, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r8)

08:32:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:32:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050600080001000104231cc88c37", 0x1f)

08:32:25 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x0)

08:32:25 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050800080001000104231cc88c37", 0x1f)

[  633.481504][ T9901] validate_nla: 7 callbacks suppressed
[  633.481515][ T9901] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:26 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x3}, 0x0)

08:32:26 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = geteuid()
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0x7, 0xc73}, {0x9, 0xfffffff8}], r2}, 0x18, 0x2)

[  633.558901][ T9901] __nla_validate_parse: 7 callbacks suppressed
[  633.558911][ T9901] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050900080001000104231cc88c37", 0x1f)

[  633.821204][ T9917] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  633.873269][ T9917] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:26 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000}}], 0x210, 0x0, 0x0)

08:32:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)

08:32:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050a00080001000104231cc88c37", 0x1f)

08:32:26 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x60f, 0x1, 0x0, 0x0, @irqchip={0x7, 0xfffff820}}]})
r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)

08:32:26 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  634.355808][ T9929] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xa}, 0x0)

[  634.418059][ T9929] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050b00080001000104231cc88c37", 0x1f)

08:32:27 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  634.653900][ T9946] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:27 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0xce800, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000140)=""/11}], 0x40f, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0)
ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f00000000c0)={0x8, 0x9, 0x1})
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
munlock(&(0x7f0000fed000/0x13000)=nil, 0x13000)

[  634.710310][ T9946] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe}, 0x0)

[  634.872206][ T9957] Unknown ioctl 1074550219
08:32:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3051000080001000104231cc88c37", 0x1f)

08:32:27 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  635.031362][ T9965] Unknown ioctl 1074550219
[  635.040827][ T9968] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  635.148867][ T9968] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:27 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}], 0x210, 0x0, 0x0)

08:32:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf}, 0x0)

08:32:27 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/de\x00\x00\x00\x00\x00\x00\x00\xf0\xff\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
r2 = dup2(r0, r1)
ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000000)={0x7, 0x7})
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)

08:32:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3051100080001000104231cc88c37", 0x1f)

08:32:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60}, 0x0)

08:32:27 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340), 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  635.441399][ T9992] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  635.493897][ T9992] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3051200080001000104231cc88c37", 0x1f)

08:32:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf0}, 0x0)

08:32:28 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x100, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

08:32:28 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340), 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

[  635.875661][T10021] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  635.913197][    C0] net_ratelimit: 22 callbacks suppressed
[  635.913206][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  635.924764][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  635.930618][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  635.936460][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  635.953278][T10021] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x300}, 0x0)

08:32:28 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x300000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/11, 0xb}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
prctl$PR_GET_SECCOMP(0x15)

08:32:28 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x210, 0x0, 0x0)

08:32:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xa00}, 0x0)

08:32:28 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340), 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3051400080001000104231cc88c37", 0x1f)

08:32:28 executing program 5:

[  636.427725][T10050] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe00}, 0x0)

[  636.492273][T10050] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:29 executing program 5:

08:32:29 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3052500080001000104231cc88c37", 0x1f)

08:32:29 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

[  636.799823][T10069] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  636.873180][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  636.873429][T10069] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  636.879066][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:29 executing program 5:

08:32:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x3f00}, 0x0)

[  637.033178][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  637.039051][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  637.273171][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  637.279042][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:29 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}], 0x210, 0x0, 0x0)

08:32:29 executing program 5:

08:32:29 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3055a00080001000104231cc88c37", 0x1f)

08:32:29 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

[  637.404157][T10093] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  637.412284][T10093] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:30 executing program 5:

08:32:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4041}, 0x0)

08:32:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3056700080001000104231cc88c37", 0x1f)

08:32:30 executing program 5:

08:32:30 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(r0)

08:32:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305b301080001000104231cc88c37", 0x1f)

08:32:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4140}, 0x0)

08:32:30 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100}}], 0x210, 0x0, 0x0)

08:32:30 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdd000/0x4000)=nil, 0x4000, 0x3)

08:32:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

08:32:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050003080001000104231cc88c37", 0x1f)

08:32:30 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x4008000, 0x0, 0x0)
close(r0)

08:32:31 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:32:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf000}, 0x0)

08:32:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:32:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x4008000, 0x0, 0x0)
close(r0)

[  638.583609][T10153] __nla_validate_parse: 3 callbacks suppressed
[  638.586083][T10153] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

08:32:31 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050102080001000104231cc88c37", 0x1f)

08:32:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x4008000, 0x0, 0x0)
close(r0)

[  638.850574][T10174] validate_nla: 3 callbacks suppressed
[  638.850584][T10174] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  638.893717][T10174] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

08:32:31 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x25800e7e)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00\xc9\xc9\xec\x80\xe3\xd7\x19)aF>\x11\x9ed\xa4IWj\xd4$,\x86\xf9\xa0r\x02A>\xb4p\xb0\xbe\xcf0\xb6\xaa\xc1\x00\x02\x9e\x9b\".O=\xf3\x86r\xffp\xcf\x93Z\xf5\xfe{\xd9L\x92\xc3\x1a\xafx\xd1s\xe4$\xf1\xd7\xc4V\x05\xb4\x8d\x86~\xed\xa1\x84W\x1d\t\x00\x00\x00\t\xb1]\x01\xf6\xfe\x0eP\xcex\xc6h\x16\x81\xb1\rO\f\xb0\xdd\x92b\x00\xacAp4\x93\xf02\xba\xe7\xed\xaeG\x1dL\xd8\x91/\xc5L\xc57\x94\xb4\xf6;\xb6\"b\xc0\xcf\xf6\xf6\x1a\xbe\f^gZ\va\x82\xf78\x8c\xa0=Q\x9cm\x0f\xf5\xdf\x9b\x1c7\r\xeb\x15\xc9\xd8/,\x0e\x11\xa6e2o\xe4^\x83\a\x9aLm)\xae\x10\xeb\xad\xed\x8d46\xa2]\xad\xf5\xf2L\xfae%\xc3[q\x11\xab\x1d\xa1\xda!M/\xa1\xd6\xc1\x84=\xef\xe6\x0f\xb9?\x93V\xb9\xe0V\xf1\x91\xdc\xc8,n\xfd\xcd\x93\xb6/\xd9K\x04\x99\nV\xb7\x02\xd5\x02\x84,\x817\xae\xb3\xf2!\x9a\xc41\x1a\x83\x82\xbf/\xd9O\x99\xec\xd3\x87M0\xf0\x19\x8b\xe8t\x82\xf6\b^\xf0\xb2SP\x18B\xb8\x98\x99\xec\x8e\xe1')
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e24, @empty}}}, 0xa0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18)

08:32:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:32:31 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050103080001000104231cc88c37", 0x1f)

08:32:31 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x210, 0x0, 0x0)

08:32:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4)
close(r0)

[  639.363456][T10192] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)

[  639.404913][T10192] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:32 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050104080001000104231cc88c37", 0x1f)

08:32:32 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4)
close(r0)

08:32:32 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:32:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

[  639.801829][T10244] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  639.870152][T10244] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:32 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050105080001000104231cc88c37", 0x1f)

08:32:32 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
splice(r2, &(0x7f0000000000), r1, &(0x7f0000000040), 0x1000, 0x6)

08:32:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

08:32:32 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x210, 0x0, 0x0)

08:32:32 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4)
close(r0)

08:32:32 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  640.403286][T10284] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  640.411413][T10284] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

08:32:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050106080001000104231cc88c37", 0x1f)

08:32:33 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(0xffffffffffffffff)

08:32:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

08:32:33 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  640.970593][T10321] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  641.043161][    C0] net_ratelimit: 18 callbacks suppressed
[  641.043176][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  641.054710][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  641.063560][T10321] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  641.193166][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  641.199035][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050107080001000104231cc88c37", 0x1f)

[  641.433393][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  641.439359][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:34 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(0xffffffffffffffff)

[  641.660925][T10363] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:34 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0xffff, 0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xa000000}, 0x0)

08:32:34 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}}], 0x210, 0x0, 0x0)

[  641.789220][T10363] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  641.833202][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  641.839015][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe000000}, 0x0)

08:32:34 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:34 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x3eb)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffffffffffffff25)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffe14)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff49)
syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
getuid()
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
close(0xffffffffffffffff)

08:32:34 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010a080001000104231cc88c37", 0x1f)

[  642.163210][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  642.169064][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

08:32:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:35 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x3})
socket$unix(0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = open(0x0, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fchown(r0, 0x0, 0x0)
accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x1000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2)
eventfd2(0x8, 0x800)
prctl$PR_SET_TIMERSLACK(0x1d, 0x9)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00')
preadv(r1, &(0x7f0000000480), 0x1000000000000181, 0x0)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4d3)

08:32:35 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x210, 0x0, 0x0)

08:32:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x8)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xdd38783483a0bc30, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x1}, 0x8)
ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x800, 0x9, 0x4, 0x8000, 0xcd})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x10001, 0x8000, 0x5, 0x0, 0x1a, 0x1, 0x6, 0x3, 0x4, 0xa3d, 0x40, 0x80000001})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x44, 0x8, 0x6, 0xc, 0x2, 0x81})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8)

08:32:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0)

[  643.354726][T10437] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  643.362853][T10437] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:36 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:36 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010e080001000104231cc88c37", 0x1f)

08:32:36 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x3})
socket$unix(0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = open(0x0, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fchown(r0, 0x0, 0x0)
accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x1000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2)
eventfd2(0x8, 0x800)
prctl$PR_SET_TIMERSLACK(0x1d, 0x9)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00')
preadv(r1, &(0x7f0000000480), 0x1000000000000181, 0x0)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4d3)

08:32:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)

[  644.330702][T10459] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:37 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x210, 0x0, 0x0)

08:32:37 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1)
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x400)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r2, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  644.570128][T10459] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40410000}, 0x0)

08:32:37 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010f080001000104231cc88c37", 0x1f)

08:32:37 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

08:32:38 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050148080001000104231cc88c37", 0x1f)

08:32:38 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400e0000}}], 0x210, 0x0, 0x0)

08:32:38 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x3})
socket$unix(0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = open(0x0, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fchown(r0, 0x0, 0x0)
accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x1000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2)
eventfd2(0x8, 0x800)
prctl$PR_SET_TIMERSLACK(0x1d, 0x9)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00')
preadv(r1, &(0x7f0000000480), 0x1000000000000181, 0x0)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4d3)

[  646.313203][    C0] net_ratelimit: 22 callbacks suppressed
[  646.313212][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  646.324714][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  646.330552][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  646.336374][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:38 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  646.402517][T10531] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

[  646.523223][T10531] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:39 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x300, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x1, 0x4000, 0x1, 0x6})

08:32:39 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305014c080001000104231cc88c37", 0x1f)

[  647.283192][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  647.289062][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:39 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x3})
socket$unix(0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = open(0x0, 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
fchown(r0, 0x0, 0x0)
accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x1000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2)
eventfd2(0x8, 0x800)
prctl$PR_SET_TIMERSLACK(0x1d, 0x9)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0)
socket$inet6(0xa, 0x3, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00')
preadv(r1, &(0x7f0000000480), 0x1000000000000181, 0x0)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x4d3)

08:32:39 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500a0000}}], 0x210, 0x0, 0x0)

[  647.433236][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  647.439069][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

[  647.583386][T10564] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  647.673217][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  647.679045][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:40 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  647.813216][T10564] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:40 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050160080001000104231cc88c37", 0x1f)

08:32:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0)

[  648.873279][T10714] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  648.881496][T10714] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:41 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e0000}}], 0x210, 0x0, 0x0)

08:32:41 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:41 executing program 3:
getpid()
clone(0x8000000000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = memfd_create(&(0x7f0000000200)='/dev/aut*Sofs\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00')
prctl$PR_SET_DUMPABLE(0x4, 0x0)
socket(0xa, 0x0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
syz_open_procfs(0x0, &(0x7f0000000180)='P\xbb\x8cX\x91\xf8\xaa\xae\xa7\x1d\"ez\x93\xc1\xf7\xa8\xc5\x87e\x00\"#\"\xcf\xe0\xbcd9\x870d+\x14!\x81\x01\xaf\x12\xe3C\x1b0X\x04\xfa')

08:32:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

08:32:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$void(r2, 0xc0045878)

08:32:42 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050168080001000104231cc88c37", 0x1f)

08:32:42 executing program 5:
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:42 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x210, 0x0, 0x0)

08:32:43 executing program 3:
perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14}, 0x10000015a)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000106000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)

08:32:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

[  650.736867][T10761] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  651.006721][T10761] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  651.433199][    C0] net_ratelimit: 18 callbacks suppressed
[  651.433208][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  651.444805][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:44 executing program 5:
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

[  651.593179][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  651.599058][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305016c080001000104231cc88c37", 0x1f)

[  651.833177][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  651.839065][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:44 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  652.107166][T10804] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:44 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)

[  652.233195][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  652.239033][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  652.353314][T10804] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

[  652.553191][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  652.559038][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x33a00, 0x9)
openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:46 executing program 5:
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:46 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050174080001000104231cc88c37", 0x1f)

08:32:46 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  653.658614][T10836] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x2)

08:32:46 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x210, 0x0, 0x0)

[  653.919090][T10836] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:46 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:47 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305017a080001000104231cc88c37", 0x1f)

08:32:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x3)

08:32:47 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  655.221665][T10871] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:47 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  655.479136][T10871] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x4)

08:32:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xfffffffe)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x1)
socket$inet6_dccp(0xa, 0x6, 0x0)

08:32:48 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x210, 0x0, 0x0)

08:32:48 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:48 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000b0001000104231cc88c37", 0x1f)

08:32:49 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  656.713200][    C0] net_ratelimit: 22 callbacks suppressed
[  656.713208][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  656.724794][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  656.730625][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  656.736432][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xa)

[  656.934017][T10915] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:49 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:50 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000c0001000104231cc88c37", 0x1f)

[  657.673193][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  657.679030][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  657.833179][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  657.839043][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:50 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x14}], 0x210, 0x0, 0x0)

[  658.073177][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  658.079056][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:50 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xe)

08:32:51 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x13)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0xbad, 0x4)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0)
write$FUSE_STATFS(r2, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x2, {{0xab4, 0x8, 0x1000, 0xe58, 0x4, 0x54, 0x1, 0x9}}}, 0x60)

08:32:51 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501002f0001000104231cc88c37", 0x1f)

08:32:51 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf)

08:32:52 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xa50}], 0x210, 0x0, 0x0)

08:32:52 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:52 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100400001000104231cc88c37", 0x1f)

08:32:52 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x100)
getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x208040, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
socket$inet(0x2, 0x80001, 0x20)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r3}, 0x10)
io_uring_setup(0x558, &(0x7f0000000000)={0x0, 0x0, 0x2dc131f5720c36ce, 0x0, 0x1ba})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x60)

08:32:52 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  660.143450][T11086] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf0)

08:32:53 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:53 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501005a0001000104231cc88c37", 0x1f)

08:32:53 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xe40}], 0x210, 0x0, 0x0)

08:32:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  661.405174][T11121] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x10\x97\x12\xcc9I~z\x03', 0x280, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x300)

[  661.833178][    C0] net_ratelimit: 18 callbacks suppressed
[  661.833187][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  661.844690][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:54 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  661.993184][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  661.999014][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:32:54 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100670001000104231cc88c37", 0x1f)

[  662.243164][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  662.249027][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:55 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xa00)

[  662.633199][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  662.639038][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  662.734323][T11158] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:55 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x480002, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:55 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xec0}], 0x210, 0x0, 0x0)

08:32:55 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  662.953236][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  662.959062][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:55 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:32:55 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:56 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  663.687004][T11285] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xe00)

08:32:56 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x1400}], 0x210, 0x0, 0x0)

08:32:56 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000b0001000104231cc88c37", 0x1f)

08:32:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:57 executing program 3:
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  664.872197][T11382] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:32:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x180000)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0xc4, 0x25, [], [@ra={0x5, 0x2, 0x3}, @pad1, @calipso={0x7, 0x18, {0x977, 0x4, 0x9e, 0x8c6f, [0x9, 0xfffffffffffffff9]}}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x4, 0xef, "c7b9068926e250d1c53e12a6e84535740497f35b0bd43b47028f403c6da7ff065f243214f124486abbbef1949c19d60448f6fcb12ada9e72652435b6316b392dde2c533b97111a111f11faec1c3911c695fd1ee76d9a2a0b96da241ae57684ec19fca2f8a04f90285e0167c7b6e98752c24875e8417ff60a92a512ed547ffadb1d2bc19938ed77721a598fc63740950de95342f3c6f4ce3d8adb46d07ab4440f6ac78ad839846a5b46dfc11931397c1259e5cd30750158320048fa9cb6213236c8cca8d596ac69dc9636673cdaf065724a1daf896653bb09f6e270e414a09dd6b97beaa764d11c138319c7bfdfadf6"}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x20}}]}, 0x138)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:32:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf00)

08:32:57 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000c0001000104231cc88c37", 0x1f)

08:32:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:58 executing program 3:
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:58 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x3f00}], 0x210, 0x0, 0x0)

[  665.788661][T11446] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:32:58 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501002f0001000104231cc88c37", 0x1f)

08:32:59 executing program 3:
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:59 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:32:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x3f00)

08:32:59 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x68e3, 0x3, 0x2, 0xb649, 0xf, 0x1, 0x3f, 0x5, 0x3, 0x67, 0x3, 0x7})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  667.047273][T11490] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
[  667.113210][    C0] net_ratelimit: 22 callbacks suppressed
[  667.113219][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  667.124784][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  667.130643][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  667.136468][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:32:59 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4000}], 0x210, 0x0, 0x0)

08:32:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x4000)

08:33:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:00 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:00 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501005a0001000104231cc88c37", 0x1f)

[  668.073205][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  668.079092][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  668.233169][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  668.239035][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:00 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x400e}], 0x210, 0x0, 0x0)

08:33:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x4041)

[  668.379666][T11520] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:01 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$admmidi(0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@remote}, &(0x7f0000000380)=0x14)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e24, @multicast1}}}, 0x88)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
prctl$PR_SVE_GET_VL(0x33, 0xb0d3)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  668.473204][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  668.479049][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:01 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100670001000104231cc88c37", 0x1f)

08:33:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  669.258696][T11640] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x4140)

08:33:02 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x500a}], 0x210, 0x0, 0x0)

08:33:02 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080300000104231cc88c37", 0x1f)

08:33:02 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:02 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

[  670.319460][T11665] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x6000)

08:33:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x8, 0x63380693, 0x3c70, 0x800, 0x1a, 0x1, 0x7, 0x0, 0x6018, 0x0, 0x8, 0x20})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000080))
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x1, 0x8})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:03 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080201000104231cc88c37", 0x1f)

08:33:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:03 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

08:33:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf000)

[  671.426851][T11691] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:04 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xc00e}], 0x210, 0x0, 0x0)

08:33:04 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:04 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

08:33:04 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080301000104231cc88c37", 0x1f)

[  672.233187][    C0] net_ratelimit: 18 callbacks suppressed
[  672.233196][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  672.244740][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x34000)

[  672.393176][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  672.399018][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  672.581168][T11724] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
[  672.633169][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  672.639057][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:05 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000100)=0x8000)

[  673.033166][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  673.039038][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:05 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x408281, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x400, 0x101000)
sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000002780)={0x2408, 0x3f, 0x2, 0x400, 0x70bd2c, 0x25dfdbfe, {0x3, 0x0, 0x6}, [@generic="423ed988935a3d91ebdaa3754e1ed0d2ce0c1cd1389c4746ffaca7d53359e894d720d2541cb2bfa45301dac318ccf7486b673402b7c811b3fbe63f73d4ec46f968b06ed71e846ec0d867b63ce18cb8c4f0b27028052db963da58c362000273ca2643508902bebf9ed6f3589be3198b5bffa3cd2bad3665e3ef66af205607481a8ad34ab261afe6cb41f0b46024fd9b102c14f19433e1f3ba521902a0ed2a6b73cf28bc15f8043513224fa9f5c5e97a75f58a102dc9049a6b75402d0986187777e71988a90d246acd553147c6c8095a79f44c6b40e11daf9c28e587b5c0f38e8180fac620764ad43a", @nested={0x11e0, 0xa, [@generic="0dc486839265eb009cb07308ba4dbf794fe2bd2234a167b57342a8dafa78c7268ae9a9cc7b4c77c1c86163631cee6dea787b3ff8e178be763cdda4837f780de404399b88bed6f2682420ec415ccbd2e32c1f034ae5100880bfbbafcdd53c73a58163d1a44f596f1992522c3bd65772304bd8d9319c1d73f778c8e9b03e5ef4db5ca97d13a44fbe6834dbdffb04a2b2caf08f364abb771d92d7b43655a11452372ae3c67f755259defb431ceaf7fdd96d0ad3c9757824e07e075cf4c9994beb48228f63abea2887722b8591cb374462b5512c33950836d0178a42b4", @typed={0x4, 0x5a}, @typed={0x8, 0x64, @u32=0x4}, @typed={0x8, 0x95, @u32=0x7}, @generic="80169eef2c56214dc1ec3efa878a83da6eb5fcc15e8384bb86e3f03e75ee1665401a8beface427bafbcd3dfc845bc8d1fdca0bca3f85a7031c8a0539f3e0c891d66211dfb511ebee2429d886b62846a1df8d07fe4967f708013d8fc245adc2d63aabc871a7fdeda65dd0cde2134eab47c4a78eea64203858a88f0e7792d886d87251cde00da00a82927ba69a01fd7eee68678a607d47473007597adba48a1d892f4b09d9d11ce7c47833d7a6ebbb2e35b133e696c033ce5b200207266eae2239db24e3f1d183381a224da907c1655604860ca0fe8785349962f1981b341b9945298cd860a5cd", @typed={0x1004, 0x78, @binary="18268fbd038e8dbd41a7e522092c28833406c68aa42a30647f95a748b010d887db45ff196421e0327b8af1d966fdcbb0e4f5ce7439459c0d6594085a0bcb1f5d2c0923e569a03092fbdceaed99ad405086bdbe9a4cc07f6e2493d4d973fff1041bd2801c3d96195950ff379c0c3abbab8de02ab771512145c77a8d718068e1633eef1e0b1982f8666d835ab78bdfc9f8bf8670ef4dc73d27c5930889b68ab9ff97e98daa84901f828f777fe03689bc55e0d08cab4cbea41303ea869adeee702d92af0bc5899ff223371eb43a778f0a87a5cbc638c3fb0a25cd504edf009f4b40acd29cacdb82c1970efea95385d40aa6c2ee407bdd8389d64b2de227517ed71062bb648c96fb6e9b3b394fdb49e7624c44f722d2d9ee868b96afb1b9ec7ea44d64b20e237e6ec37b50c7b837ab5cfb000e4e7185ab2f58249430dc1d0cfb050181fb801028d69560560032b364418321ef4dfc855e344da497292bc4fd1a415aeba5ef19a2f32a1d113730c26150e5711abac1ad725fe4da468ffabf278f142a6189a1883bf60da829b8b9025f96ce227ec9dfcbef413cf334ab80df1254b0c7c3cb51b074f5cb5ab1caccfc6a7e1c8f62a9c843bc6f7e43ac68fd35087d2a9ce3e8ced51244c7a55192adcc47a0c5abd95a20b2c2764550f40500c88823d7cf2f33b52a59fc53b2b5dcc8e0b78778bd9179b3a94ce5045412b499ab5104c3720e4d4ebec325b39030c60886b26e08065b6c9536a97dbfe7ce12df3a96771d14802a8de205a749a68e9ed51f670fb87f7147a4dfa6b688e5c9f9cf7a9d0260810dae4cf90adfc9bb162d4c1039a5402e8e595b25ddafbf97854e839ba05e2c9c477e0a0014ecf18f4b7d4b35f0269d7560b12f9343d257a9b3b880e1d239d7c1b71ad426ce53915f65376860bcf240f81f30fedaced803723c3112c5cd7ff3fa2ba1ae486b20d438cf1f98198c53a4378482659d70f463f0ed86a440fb5c823762e3c506dad5c9cf43e3050a70c329b87c0da03f2734898e20de032d352804049bf8653a34bbddb2d34ebd8ca8521c9756a02303f197231946be657e6b718710a71f24373a6c6894cb9295d0340d59a4439af89b7c6738b67bb760e775239c9ab666311ed59ba1f705834c57caa1fec2df466351de10cd17f7dc7dd6bfb24f64520ef48061674d96e4734d544ea7a923704d2a2a7c93b614e8f9559d8f11b5a3eaf3e6f2204b4bfad1d429cc8203ab70936951e4ef9a78883efd3638b4957301286fd4ae02074da8716cef2b3dcd3ae60f299f7f56277826904155745cc1f4c2f49f4026b163385a736fe5770651a0e34828270d7db9c56c61fbe39534ceae90dc749b07919a1174271e490591e1ce9df223903865beaf0f5e3da22c9985ee8b411e95db3634dcb347d9e163c3034a82cd7bc3557c71ae115d532ed0e15919e062a75097f8bdf1d5e413bad0fd8701e9b96f63e0a7b9b014fcc9c89d4d5fa93c8c11700bdf430c89492884a7883bce75f5d719f4951beb95fd064cd47ba1702ef69570bc4d32c283f3bfbd355d386fe1de05b8416566bc604b7d1e9e58121ab770bf0ced4f2f24e7daf180070c9818110f802a8f6fe0331a0cb10fc044a0172c9a214c578b39410726141d9d476c14e449cd4e7b658aed17a241e68c2e9e4f47945c23a95e1fe38f53dc528e1a9df0831b50c41ed670fbbda8f60a85d633eee86252283bfa6e4911e9ad30d3bbd1430f420c08dfdae944c42da7001b3f69a385b7c6495f8cf71d1447c79e5e1fda7d0dbb3ff864b439a619e4599eafe2b7fd75247cc42e7651aa7e30f66dbb2485909e62c745c08c5caddf5c8853b62d80bf63cd7f763db67188f3f702d43861771726492d51974068d22d674d56b9d08c3f6a6e5b114eaf72cdbfe4ba93f4279739c7ce19986254704b0941593d28a7e4481701023df2adcefa88f2e14d52acb1b65d52695a885487e69f9e3ad8f52aa933ce78419e002b10d8389e5809d9614363f772fe722a67595038e4a4eadc4f96d067f33d4db0e2b321d18aef953534d7c1c095be869f3d1433cb88a87ae2a0d040db760242e46a226bcd92d2c38d8981a38152b33618d673f6880e1fe6e4692ed36c7e16bb0ae62891b6301cd33ee97a4fb3af5645a087041dae559c3cfa20139c72acfc66aac8ec931988c9d1a500839b459d4b8941e83bbd0c79138ca289d2156d12fecfd75b9dd0d4fea58ee597fb1db1875eb7dbfb6580e7319a2e6ebd4f035844df0887cb1c1b190649b019bc1a0f0ce531b08ec05d832b13128b744d41779b6e1eb1911f4546301cfb293bb0a8ce018664e3e5ab5de2f752ba7e9bb156ee436fc27539cc601130c822e26031f91e28a59135341b17a6d53eea2d847bd271598ce3bbc05c2adc43f8a1d94815bf78af6dab7fb3169f136c4ea88eed474f8f317fa1abd5cf61fb0dbc08b0867ab8e1505ba191b2c59d3d777fa192072da0ae3ea39e0bc251177a1d9c2bbc2d507e131d39cd922094d33f33f716a902dc39c1e40fd2ffa3bf6a94708aa72a56981196b8c3701a3d1ac4aa3c10934fa7d8ee6bfe98c68684af314ca6b9a9e74874cde1577a1adea9c0a062fd7cfec0ce4f3b81d478d1be43d2197ac7aecff84d483b5dbe983c44bcc172360073a5f892d1ba903389a96026df6adbb42281ceaffadddfda63b4df3dedcd25a2b86fb156bc6f0b9b81fca199563450daf926f2e013c87c3770c15ab5a29e8d797d1edcb2ed70638c83b7dfe4a6e9d68a90d2df551cb499407325460f31a8331d9c36ca812d5dd679b2ab9e2c811127064e9cfb3b9ffdace29bd92aff5db6019a4895fedb2fad875991faa1bdc39dd6dbd0887bf44a9097203c16c8721ca1505ec187080bc321e5075b877d75d3b5a5c9238c4cded99ef957a295723db8f2361c190589cb27d8ed0dba0655855f85923c0ed320d8297c70bdb1cfdf5df7a6b95bc5a08d5077473a606e3525c5d15256931a503caa489eee302bbd714548f0c7d064eaca1961e4ae09bbffe70ca9558cbec9444af9156d002e7e13ea48629d7654c7ae2358810f4bf2d9328c3bdbbea2234747554951d92193f938d89dffd71b81742894b0301621c017784826d1beb894c22d3899cdfc7d48be3446a0422a14ea9c1b462c969450085e24b7665477d84f19c6717a29fb5f5ddd96904a89630979c0cc38ac918d411ca41013f6606ee6c9bd2af62fd44ed62cebc72ebcd4697314c6fd0df6c6bbea2404f7d6259cf9e549009bd01dca3cd053b2da3a9414e622f472b17a932d69cf78f84d6b419eb400f325c98c0483082949ae4bb81b229cfd11dea1da4d79d7ba145bbd92307572c4568781cddece8b64732d0055b99910864eaac45219e40a82fd032b6130b0dc6152788f41622bf79d717ad63c01d153919c5119ec23e8806b99f505979a7aaf4330feaff697256367c50db7dc4cdb3ebc1e220815a484d2ae9964b87cabb77a9fc9516c76dceb8dd4bafd5b350a9907be2b39bbbf09545d2f06f21e5a250a1ede366b6bca400a756fb3bc3e62a5337a1991bfca1c2dea3597e05a7f2fe67eda3d039fb3ad4b750dc5b1ddffc5b595eee863e79adde3a038db59e4cbabd5a6abf303e7a55229ab5ffb5d494a0607cdcf16817fca1cfd7aa1b583fe5106bba53bec70906dec1a91da4b6b52234dc8f79f4f498824a5bcb10a62ba4350087cb8f878cd9a599524de10f8f62a242faed2c5d185de8f8d91ffb492c0faaa75286f3edaa9dbf6a22bb7dd61259375681a23e6f97a58025a683a18045777d05b9c876390a07072f1159f583e1d68d4628f41330a08d08c006edf60c3d6fa327cad9f31d1d76e5eb35e437203da57d5fdc49b7e4a03b41b86d7c1999790b9e467df5f25c6887084b4d577548cae19dd66bdc28073a6e58fc34c50556848e648793d63d59d60d914136e070cc89119321d2fbe995cb12b3363de6196cedd2a262597734d82aa901f33aadf1e81998d2a6bee00ba95901f2dd1e8befb685a8100b05b7ea51e3047f04545f9dafe93198e9b901fafb4ad3dc91a7ea8d2f6f07b6619ae37dd690c737f547a0a88374d81720ddde52b0d3ecba7505ce0c935fced0149cba7b80fd120aead58cdd007449a353f8a0f91324c5b5689cf9587565a73feb707ce24d91e44e406de716361b3a330eb7e3985746e424bc06aed596d9adafa05d702058a918a9d6acff944d4f0d750ec15be257f7c9bc0789768c6700705b906ada1fdd1c292f67db1ce5e0b1166f6e63833f1c218a15da79c56e2ed81b4b178e16c06b17155db26e8b0b81b7500c295547c20f3bf69efb89841b6a62c4995ded4a95d63ad1ea1104f6c3651cc386030be9f3279bc65502987080f2574b8e850750cdef101fbea6edc5e2dae2499e4a5e4d59837ddfa641e307b90ba581249751a6a5db25461eb158f8c6e83d3ef401bae9c1f4150a65162f4b2e6e11c182d48b388d92ff4e31dd1fbbcdb267e47f408179bbe398e9c3dac28f982530696a0f1e4c5fc02c3b948701ba9e0f2a97dc0c7aea61d6d6243e9a0b8e9d31ea503acaca477b2520ec8d86f9e7be55097bf09a9d89dd38b6821182e6a838b04ce9b4d785b5499ce5a723dec2f75caeb047d6ed329949a7729c4ed5eb8c9d3b682e2c1936e9cc392328b937347f594ff56561741ba14770f81fe56490549738e16a87d7035864ef7621e1c4dfc0b4590fd02475a7a52f46118c8a578d2e903c70ab1a03f90e465baea401925a0dc94be3f511fa513f68085d690be36bf31c776946d122109b973f910f20ed3263c4322d38b2f7834b4c60edd88c5c977265a4badf915d78ffc1fcad170dafb421334806f46831c486d1d694e22b50690f62436a87ff84f87bdb9ee817fe183a602f7156c94323110947aaa408cd4c619ed9fd06e0f976eff8c102ae1e19764ab402020a017118991d084f01db618345067b0e23e9908d55190aca5ac17ce70fc3a8bcf9e04dad788ed86e52ab0fc0d81b7cb255e033475a24e6eb9bc0dcbcbd01c2b8759b2ce40ccf41032d47e4bfe60a1622fd9515bef43c09f099a1f692543491d64656694932f5a06ca932397b3b6c27b4d96b708f5fb7724b7f40e45564731f4152d0198d97282a67e5c47e8b67c83c91572f0ca001219a7f2dbb2b7a7e6774d3d765703679e2aad3362ffaba615dce26f6b696904229118732d7f991436ae7727830d2ad477c176dc2f229a61035138a8385897f929275f1f6538919165bda549cf8c25dc251ff497e9e69d11fe37bd5028b50a4c9b6d46cf0b2ba16352877173c0ae2a460b1fcd60d132448c1691223c39ce60c4116aff79d43b8713f02c8e2f2932a220700fca3a41e9c4f7697e8e91663ff5bf9d85f0499f722118b762a974a31fcae31cbfbbd0fca5ae83b4a33ad08b055e72b77e461ffaaceee97946f1faeee3fb348c164b082ab24ed3a9ce4dec00b3dff0e7c829613dd10fc72880ae7fca048a328996ee4e7be16dfd201be777f8ef9407753614d909efba2fab1083206b8a318415892929f031fcbcf05a0663e5f3c739eeec210f527e4da7b15b6de071b3c3e45617f3303bd3f76bfe397582d9244dbbb8dc7c601d49483b3d981077fa57feaaf0a9ac35af236f50c32c333ab7e2ae2f9598190589f7bac44e415991db582e3e01627c2457d0f5188aadd21f6dd686ba432be99fd1ab2e869f4b129283bceaa8322fd44e9c8942180a146237af218229dd2afe4cba236c6bf96194fb2698700553172f30d573393a0557331783"}]}, @nested={0x112c, 0x3f, [@typed={0xc, 0x23, @u64=0x5b}, @typed={0x1004, 0x4f, @binary="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"}, @generic="f8286c04c7a5038bf47b9e00a015624aa5a3d56874796a8214079175fb7aa39fd231b9cec0afa62271b505c3b44b275c60ea588493e69393938dc38c7a8cbaeb4aba3d6272255d3fbb2b3067225d5a9797b54d98fdfe12d003dc7946053771af01e316b6bdf365ad79a71678688a2bd6fff64b3ea2ae5c27fe3e3e397df74f89760d2f62104f7776492e1f6e30d414f3ccd5ea740369556812528255", @typed={0x4, 0x90}, @typed={0xc, 0x4e, @u64=0x7}, @generic="91173a3f9bdb6adedb7db3e946", @generic="8c7c703a7ace105a682990ff35b50dbae1ccb2b0e87dbe256151fee3ad09afdf26b67df96d8e871771291cd05bc7169e2eb894a3c91ed0fed27067f96b8ceebca4544f37a4a28bc8ec8e48ec64291e17d9100435350130d5350754d5d2a3"]}]}, 0x2408}, 0x1, 0x0, 0x0, 0x4000}, 0x811)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x88001, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:05 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xff00}], 0x210, 0x0, 0x0)

08:33:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x400300)

08:33:05 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080401000104231cc88c37", 0x1f)

[  673.353229][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  673.359069][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:06 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  673.625615][T11767] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf0ffff)

08:33:06 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x208, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/81)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000, 0x81)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f68fde88b508405c8647cfc00b3dd647f450000000000000000fb0000000000004029588171101000720555fd36f6b8209bbe0b00001600380001000900ff030100029ebd"], 0x45)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)

08:33:06 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080501000104231cc88c37", 0x1f)

08:33:06 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:07 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xa8800, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={<r7=>r6, @in6={{0xa, 0x4e24, 0x1, @remote, 0xfffffff8}}}, &(0x7f0000000100)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0xc)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r8, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SIOCAX25ADDFWD(r8, 0x89ea, &(0x7f0000000200)={@bcast, @bcast})

08:33:07 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x1a000}], 0x210, 0x0, 0x0)

08:33:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x1000000)

[  674.820946][T11801] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:07 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:08 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080601000104231cc88c37", 0x1f)

08:33:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x2000000)

08:33:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200)='(', &(0x7f00000000c0)}, 0x20)

[  675.969206][T11835] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:08 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x34000}], 0x210, 0x0, 0x0)

08:33:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:08 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080701000104231cc88c37", 0x1f)

08:33:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x3000000)

08:33:09 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x8200)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x1f)

08:33:09 executing program 5:
getpid()
clone(0x8000000000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)

08:33:09 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  676.912219][T11863] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x4000000)

08:33:09 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x40000}], 0x210, 0x0, 0x0)

08:33:10 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080a01000104231cc88c37", 0x1f)

[  677.513199][    C0] net_ratelimit: 22 callbacks suppressed
[  677.513209][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  677.524756][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  677.530578][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  677.536388][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
write$nbd(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="6744669801000000030002000165b7"], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400))
ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000)

08:33:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

08:33:10 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080e01000104231cc88c37", 0x1f)

[  678.473187][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  678.479046][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xa000000)

[  678.633155][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  678.639028][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:11 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSTI(r3, 0x5412, 0xc0)

08:33:11 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x400300}], 0x210, 0x0, 0x0)

08:33:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  678.873173][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  678.879015][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  678.925239][T12023] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:11 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0)
r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x8122)
lseek(r0, 0x3f00, 0x4)

08:33:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xe000000)

08:33:11 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080f01000104231cc88c37", 0x1f)

08:33:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})

[  679.873862][T12053] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf000000)

08:33:12 executing program 5:
r0 = socket(0x840000000002, 0x3, 0x200000000000ff)
sendto$inet(r0, &(0x7f0000001640)="44a116f7e7780ad4ee5676f4c4ff320c90c62caf", 0x14, 0x0, &(0x7f0000001740)={0x2, 0x0, @dev}, 0x10)

08:33:13 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100084801000104231cc88c37", 0x1f)

08:33:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x3f000000)

08:33:13 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8002, 0x0)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='P', 0x1}], 0x1, 0x0)

[  680.904015][T12073] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x242000, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x8, 0xfffffff8, 0x10001, 0x0, 0x1a, 0xe2, 0x0, 0x8, 0xc77, 0x7, 0xfffffff9, 0x7})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000000))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

08:33:14 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xa00100}], 0x210, 0x0, 0x0)

08:33:14 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100084c01000104231cc88c37", 0x1f)

08:33:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x40000000)

08:33:14 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x9, 0x209e1e, 0x3, 0x1}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20)

[  682.324916][T12123] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x40410000)

08:33:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

[  682.633205][    C0] net_ratelimit: 18 callbacks suppressed
[  682.633214][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  682.644733][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:15 executing program 5:
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x6, 0x3, 0x3}, 0xcf3e}}, 0x18)
syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@uqnoenforce='uqnoenforce'}, {@nolargeio='nolargeio'}, {@nogrpid='nogrpid'}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[  682.793170][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  682.799051][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:15 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100086001000104231cc88c37", 0x1f)

[  683.033173][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  683.039051][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  683.336674][T12152] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:15 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x210, 0x0, 0x0)

08:33:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x60000000)

[  683.433207][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  683.439067][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  683.753177][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  683.759040][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:16 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000000))
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="63605d7d62b7d0e00cfb79be55e75b6a", 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x9effffff)

08:33:16 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)

08:33:16 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100086801000104231cc88c37", 0x1f)

08:33:16 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00\x00\x00!\x98YN\xa3\x96Y7\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000400)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1\xf7*\xf5\xc2G\xe4*FW\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-\x83\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x94\xdd\x7fxl\xcd\xfc[i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\x13-\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85E8\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3\xf9\xc4\xc4.\x9dQ\xcf\xd5ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8\xc2Uo^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x8b\xff\xff\xff\xff\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7')

[  684.368510][T12182] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:17 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f00000003c0)='./file1\x00', 0x0)
r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x8122)
lseek(r2, 0x3f00, 0x4)

08:33:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf0ffffff)

08:33:17 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100086c01000104231cc88c37", 0x1f)

[  685.364352][T12204] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xfffff000)

08:33:18 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100087401000104231cc88c37", 0x1f)

[  686.333031][T12218] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:19 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2000000}], 0x210, 0x0, 0x0)

08:33:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xffffff7f)

08:33:20 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x2, 0xfffffffffffffff8, 0x1, 0x7d, 0x3, [{0x40000000000000, 0x5, 0x9, 0x0, 0x0, 0x1100}, {0x2, 0x7f, 0x100}, {0x101, 0x8, 0x8, 0x0, 0x0, 0x8}]})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:20 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100087a01000104231cc88c37", 0x1f)

08:33:20 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r1 = socket$inet6(0xa, 0x80003, 0x3)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071")
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)
read(r0, &(0x7f0000000140)=""/165, 0xa5)

08:33:20 executing program 3:
pwritev(0xffffffffffffffff, &(0x7f0000001e40)=[{&(0x7f0000002000)='82', 0x2}], 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='md5\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000500)={@broadcast, @empty, [], {@llc_tr={0x11, {@llc={0x6, 0x0, "05fc", "23b1ecac4c9d4c5fd9833e82e121735a98d48e805abc2fbf5f8fcb03d20f1a9032b5e34cf84da9c5affe4b7fc9a44bbb5265558772c28efee7147b3c6db6027fa3089d02bebdc8f2b827827d8775c88a45642d0317b2e458a1f7aa327b3fd2f377aa1d7cc6e19382120bf8c67b417b97d1"}}}}}, &(0x7f0000000240)={0x1, 0x10004, [0x0, 0x0, 0xf55, 0x66f]})
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10005, 0x0)
connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000005c0))
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x70bd26, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mkdir(0x0, 0x0)

08:33:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xffffff9e)

[  687.923192][    C0] net_ratelimit: 22 callbacks suppressed
[  687.923201][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  687.934738][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  687.940561][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  687.946364][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  688.004304][T12262] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
[  688.089864][T12261] devpts: called with bogus options
08:33:20 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080003000104231cc88c37", 0x1f)

08:33:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xfffffff0)

[  688.724930][T12288] devpts: called with bogus options
08:33:21 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x14000000}], 0x210, 0x0, 0x0)

[  688.873218][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  688.879057][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:21 executing program 5:
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98)
io_setup(0x8, 0x0)
sysfs$3(0x3)
io_submit(0x0, 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)=',\x10\xec]$R\xaf\xf18\'\x99\xfc\xa1\xef\xff3\xd5\x9f\x9d\xff;L\xde<\xb8\xe5\xc4\x8c\xba2A\xaa6\x1d\x97,\xa7t3\x14\x1f\x94\x1b\xebzGY\x83\xa8\x0e\xc3Q\xb81\xf4\xea\xa2D\xd3\xf4\'\xea29\x80\xd3\xd7\xc2L\x8a\xe52W$)\x0e,\xf1P\xd4\xb1|z\xe5R\xb5.\xe4\xa7\xad\xd1\xbfRB\xeduL\xa9k')
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x524}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x33b96d8691577f5, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
pipe(0x0)
recvmsg(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd12, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=""/37, 0x26d}, 0x2100)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x80000000, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
fchown(r4, 0x0, 0x0)
write$FUSE_STATFS(r4, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)={{0xcc, 0x80, 0x5, 0x2c1, 0x1d7, 0x0, 0x208, 0x5}, "c1c049d375bf20685b85fe958ff2986fab3da54847a59eda0a9220cfc49ab365d0a461424acf979ac97117927c3b57bb350ff7f536bec40469274e1386da82800126bd6ebe8a827af506ecfddb34e4c943c607fa2f88bae5c95a63b36f8a584c1b8315461c2c7c605f97f315ec3c8998e7b570c1fd00a40e7725a30a0667f4c49443427828331b7b80653ad73f6e78320655cc32c17ad9025f58f03b8d8094260a9cf44dd1fbc794677c8635574a2f56ac614dde820a4b65fd68de4727bf33b47c5cdaa4d97ac539b2d473cef92d3b16444bce453608c70ba403bce1c65b68eca511bf8b0f417edd5640969eb5435f166e626288b74f463267d74458171104f679a15a38524d351c704ea2b5eefd1a9ea1c5a342198b5ab080ee7e728469bdceb6f2f3186c9ee201eb6faf1893576d61aa6c9feb13eeca130172062e8ac22adf74aff94b70b6f09fa7478fdd4659168a003ac0b72e12bab3063690b8e042a505dad06c66b631463ae1fe7f36ef5835909efe555ed914c29d4ca8b916da5c84738f8bd94f87e8ebbe75060bfebc9dcd5041c20db3d1b89cb6252fe59f62f947b63c15a8a8217104926ee297e79213717f62f8f2fa7acca438f9d311fc1a888de5f43c895ed4d19762679cfd46375e118f6fb2206336231422cab515a98b29d46e93622afefd611905f68c8f223359e27b9dea4a4257710a90c0ee29d105b59bb598feb10d4d60e42f74208d8acfb52e1dad5d390c3dcb5c83bfd18f65415d29ebbe08b688379dd49c9fb6d4abe2ef04087bbda3774649aeeb55c3b88b51ee3ff2bef543d9bd941e8c9556aec0a0b41999f37074bf1c2079e6d04fcd07c27d28d74b490d36774e7b163905cb20ab78b250438019b40b540c51cc02cd44d0a2bd05350041a02d70af8c0f633b36513218ba8386810f0e4cec55e5c31a92d83e1ece77fe30cb3d533291bd122dc0d346c28a7d430fd731db57ceedd2950771eb5f8d02783f0f27f72c03d0ece9fe38a421759b65fd875f79e00f870aa704ae2b23a5d3b22a4896519f9488048d5517045cdac46095eb78d764795ee7c71da2c880ec1791371c3e1f06720d4623811b350b4716e5dc341899c6e2975268b44a0369aa798802138602040e5833a089937c746d378c4eec90fea8799f5c989a074adcaa1a3a49b2b8c527042ceb616eceb005ae54207dfb2904c68564daaec6d2a4ab923b4da9c60c523cea357205bb05dc1bca9def8b26c2d1fffc05b777508a6847694236988552ee55f7c17b1a619b3d046872d4eb548ef884b0ff1691c5f87b118c697dd1f1c6ffec939c75a060eceec81e0837b65fdef80739c74ecb0d03784c9d5beaa9c509781538cc6d08845fa67cfe8b58d61823ea9579ac8902c35bbd18b00074b4856f4b375516930963a17b7b6467e065fb003208c4c46da3ef4e5fba98f06d09b65d7c69d25bf5ce5a301447e3e50a8cb2e9e358ff461f423e0aa91bff83a044b105affb2d7e95989f135b92d95c99eb38379a24cec36edc2bb368eb08d0628b4b4eaa049e052f7ecbf4eac67994657da024c355e7f256bc672369659dac052ecb5c0e343aa6f1647e7b00c258f07459e69269d6fbbcc5d846192fc8d9d25377c2c3966d9fb2d963593f8e70c226e5addfcf01daabbb7a066b4fdb2fc25db6aea9e9ad851906add6317a121504fddd3cee1140e6bce36a7d63dd14c61467166e2eae5a0e403e936f7686b6c98f1d759eb51a16c9e23a9ab1d8271dacb1feccf80489d376a4dce7bf53f573779b368184c2d15ba01d183026e2a1bf4af26398aba34f33c3c6d7f22e773510ea37dbff453a92b44b56a5f0fd3f4590a24a5c2519b3aa16e728eb2f1d7be32b1eb6648127a42ae6bf8338259946cb3600658b86e28189d62facd350c3f32f0f43af68654d0322b2236285cd4c219475d7de0bcc81bbc02a36632d16d8d89d2fb07b82893a466422f0cc8d0fa6af81e5aa3ce0f288e0e896772e2e5c4e6cc38e9c0066213f08c16c0f0dfb4a736ba41c398afc709866a4f60507961de8d51c548984e3dbb1d7aeaf33e9f4b573a9d625a55052a7a449404e2a1b2fe926823ff9de6404f33d31ffad5613f8b5e3f9decd1f0bc6b6faf1a3700e8a5e54fb4d162c861e85ea2187fc0e8475ba6dadb8cf07ffe11908734bc1beef3d92b99112d16ade532a1af78a9b566c8a14a20031f082ae462284c54fb2a8ec17c4ad755ce6c18e2da2333d3d9e3f8f93b2eef37938fbdb1e2b190696ef623cd51641883bc2469b6846f181e3b4929bf41a763f1253eaa7331d711caa808c857e5854287d35dc58bce8977f6b9f192a7c827054e281b82f341bc73a40f65f4f6f6125aeb90a13be07d6cc2abf7b0d653a9d0a8701d5ae966d62f16c8db3c50b153d791668556b96cdf07911bd2afaddf85d53840c3e81f2368a11a60ee5e3eadadb5933efaa997e95c5ac8d36b21649e6e0073040b107d3b1b77bb501c76d4c08ec5b0f23874f8f46f17396caf27e1bc90465c04b2846eee3d433930a3481278a23919f28cae50cfdbf55f6848ba77ad2a70f1d6f27987e45699948a5e4a996ab1d831886e7b911ccbbc03ae0657c8a27b176869d7992738dfa9b37c71114e46b7b7241e9ecb097129fb0dbd8f18f8055063c242afa0c39fe00f295d016775872e648ee75223d22823362acae5fcbe32a6f55946e0ed726b4e1024b2981864215ac9fec370e9f6f94b5436b6526b5e28894fb6c79ef0b794a8db84eb495aaba388a60feb711185effd3b0f58f40d62891e3899aaadd2c49a19a7135d1e8605d0b0f362b223beffd75c0c4570a30d6af77e98108b5d454d55f874d8c76cd294578422f74f3ce4e073ad3f784776dd77b485360c6b43fc0da8bb689da3bc0f885b2e6ed3adc9fb2cad1bf860a42ba686b1c40973a764d70355ea4639f37d3b6c3a9bbcd925c6806fc8339a6ca47533abc8e61017cf75407c5d782b6b1dd507307e87cadc39dc9ffb1f8771c2234d5958a9ed9292a11f0ec92b01a12fb9d96e0cc130f974ff594d85f6418f77c302783026d15e67adff7d1834407f9b15f564be3a7d8e5b27a309d05c8e71f40e968101af403a0182533e9bd9aadbcd95ac8638bf9ca1d362ec08b73bf3b0f9b0246309fd4afca7351a2b84c7b71f05b751bc55580e50b07d08636e932391adcd4eb12dde07c6318addb6a24193cfa044d6a8045119d973b13c8925bab2bb10c08843264e283ca3149a265bc6a2c3f85373c78edb8c169c91c1fd58eca05c74604359ef1e3056bf9795e92e954e26694f025a54246757386e40fcb05fa0a329a524d1c9ca3b1eb0e44643cb8b4ffeea891b59f43a9ea70240446e34db64b1980a45c6c3c0b4e3cf8ece3b7e3852b0b2757b5fd20ae307951f5f6fde951061097874511b374222c06768e131ec9fd609d60dabd2e20f02e6d6299099d3e0541d916dbe072951d5f822c0da32a00631fe751fe4d7c9667458905d6cafc5d4a8994cbea48b89135ee47313bfa8973b1d0dfb2799fa3861c9d3f958fc43b7fde1e9eba40fef0c5d6797a15a8adeacb3584435e5b2d288980689b264c4affd95ca8602b024d08d90c09112b1e42dde9637966a2b33e6aef43828242620065901a21cfc60e6509d1425c14a6496977293b3a992e6493aa0019318e35685c07a9183a71c5c6d51c2cc87e295b39e42a8c4897a9677c9395dfd325dfdc926c768bac8366156930e8960ab02564c5206f03402554419ce21e23f98819989ead89a30c364ee1bf201960456bef9e652c5b8eb5a6476a3d08ba6f42b5896f7d8a965770c7a8f09b974c8f226d25c1695ee020f4b61f2a8ae2c9ee42e1fc4b2cbe9ba21d8653bde688eb55bf91577af1687a167046272babb75bc72885e4dc0a9b5ea26b2d0107357c0cb96d967d3667120843798f7df50624a6c9aa88f4aab2ae76d2eb766eac6e75222c29998dce100ae5ac963502298e8d46d3f74338d2b6920118f8ff7bacd3521219b9b6d324faae7cd6807597ea8b64e5eedd492c9bdc329cb043180e84414173266332df69a08c7543a41d87db460be6bac40391f2ee958f553e54a02d9ae07518aa046f81424fd6a3cb31bba38d57e8a900d3cd453a54ea74ca862a8ae08dc5248ff201782a88016c09a127738602678fd4cc50fe6a6a2766c04ff89587daac6c5b50f9edab353e954618595d90de41370046726ba5b6152c39755b7c96c7ee172b3bcddf020f44c7ae44dd09ba07361cce11874e77dbba812708cd6c3c5f2b7ef42efb72f029655c03088edcc5649dfde7daf9163f04510e8553a659d679b9c3", [[], [], [], [], [], [], [], [], []]}, 0x1518)

[  689.033174][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  689.039012][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:21 executing program 3:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0))
ptrace(0x4206, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace(0x4202, r0)

08:33:21 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080005000104231cc88c37", 0x1f)

[  689.273186][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  689.279080][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  689.411038][T12408] devpts: called with bogus options
08:33:22 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000140)={@loopback, @loopback, @mcast2, 0x5, 0x41, 0x3ff, 0xc00, 0x6, 0x0, r4})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x7)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x600000000000, 0x40000)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r7, &(0x7f00000017c0), 0x199, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r8, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$nl_route(r8, 0x0, 0x4004)

[  689.599894][T12427] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
08:33:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x40030000000000)

[  689.771058][T12427] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  690.090282][   T26] audit: type=1804 audit(1572424402.599:85): pid=12433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir713339327/syzkaller.QmL01n/420/file0" dev="sda1" ino=16673 res=1
08:33:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080006000104231cc88c37", 0x1f)

08:33:22 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x3f000000}], 0x210, 0x0, 0x0)

[  690.168275][T12446] devpts: called with bogus options
08:33:22 executing program 3:
clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0))
ptrace(0x4206, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace(0x4202, r0)

08:33:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf0ffffffffffff)

[  690.472736][   T26] audit: type=1804 audit(1572424402.669:86): pid=12446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir713339327/syzkaller.QmL01n/420/file0" dev="sda1" ino=16673 res=1
08:33:23 executing program 5:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg$inet6(r0, &(0x7f0000005940)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x4004040)

[  690.546647][T12439] sp0: Synchronizing with TNC
[  690.598012][T12464] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  690.979805][   T26] audit: type=1804 audit(1572424402.959:87): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir713339327/syzkaller.QmL01n/420/file0" dev="sda1" ino=16673 res=1
[  691.029638][T12445] sp0: Synchronizing with TNC
08:33:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x100000000000000)

08:33:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080009000104231cc88c37", 0x1f)

[  691.669324][T12505] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:24 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/\x00\x00\x00\x00\x00\x00\x0fu\x00', 0x20e082, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000040)=""/132, 0x84}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000)=0x64, 0x4)

08:33:24 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:24 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x40000000}], 0x210, 0x0, 0x0)

08:33:24 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
creat(0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0)
open(0x0, 0x0, 0x0)
mincore(&(0x7f0000006000/0x4000)=nil, 0x4000, &(0x7f00000001c0)=""/143)

08:33:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x200000000000000)

08:33:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008000a000104231cc88c37", 0x1f)

08:33:24 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x300000000000000)

[  692.852881][T12545] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  693.033184][    C0] net_ratelimit: 18 callbacks suppressed
[  693.033193][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  693.044758][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:25 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x400e0000}], 0x210, 0x0, 0x0)

08:33:25 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000280)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x6})
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
keyctl$search(0xa, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0)

[  693.193162][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  693.199021][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:25 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008000b000104231cc88c37", 0x1f)

08:33:25 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:26 executing program 0:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8040, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r5, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={r5, @broadcast, @multicast1}, 0xc)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r6, 0x9, 0x3b, "1d226e6ceedb1b845c518e6a057d036f746ed8923936da8957907ab1804a7f9abfebb0f0d1709e240984ff1de1d6eef3a2086b96c3121f4eeb64d5"}, 0x43)
socket$nl_route(0x10, 0x3, 0x0)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x4e20, 0xbcb3, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x67, 0x0, r8}, {0x4, 0x8, 0x3, 0x4, 0x0, 0x7, 0x0, 0xffffffff}, {0x37, 0x90, 0xfe00000, 0x17e}, 0x1000, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x0, 0x401, 0x1ced, 0x7fffffff}}, 0xe8)
getresuid(&(0x7f0000000180)=<r9=>0x0, &(0x7f0000000280), &(0x7f00000002c0))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8)
r11 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x4e20, 0xbcb3, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x67, 0x0, r11}, {0x4, 0x8, 0x3, 0x4, 0x0, 0x7, 0x0, 0xffffffff}, {0x37, 0x90, 0xfe00000, 0x17e}, 0x1000, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x0, 0x401, 0x1ced, 0x7fffffff}}, 0xe8)
r12 = geteuid()
fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010003000000000002000000", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000b00", @ANYRES32=r9, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="02000400", @ANYRES32=r11, @ANYBLOB="02000100", @ANYRES32=r12, @ANYBLOB="040001000000000010000400000000002000050000000000"], 0x54, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  693.433181][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  693.439030][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x400000000000000)

[  693.684793][T12564] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  693.833165][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  693.839029][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:26 executing program 5:
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='md5\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000500)={@broadcast, @empty, [], {@llc_tr={0x11, {@llc={0x6, 0x0, "05fc", "23b1ecac4c9d4c5fd9833e82e121735a98d48e805abc2fbf5f8fcb03d20f1a9032b5e34cf84da9c5affe4b7fc9a44bbb5265558772c28efee7147b3c6db6027fa3089d02bebdc8f2b827827d8775c88a45642d0317b2e458a1f7aa327b3fd2f377aa1d7cc6e19382120bf8c67b417b97d1"}}}}}, &(0x7f0000000240)={0x1, 0x10004, [0x0, 0x0, 0xf55, 0x66f]})
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000005c0))
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x70bd26, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mkdir(0x0, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00\x89 P\x0e\x1e\xe94\xbd\x03\x16\x9d\xff)F\xb2$t\x1b\x84S$\xff\x8e\x14\xe0\xaf\xf3\xed\x94Y>\x95\xe2\x99\xa9(\xd9\x8cG\x19\x1ey\xec\xfb\xc7|]a.3\x0f\xa4\xba\xf9p\xf8\xd1\xec?\xf9\xff\xa4\xa8t\xc7a?\xf0\x8d\x93\xf9\xf9\x1b\xf0\xb6\xe1\n#,\x92\x8cI\xe7\xcc_\xf5\xeaVrN\xa3\xe2Z,>\x03\xaa\xf7\x88', &(0x7f0000001ffb)={'cyz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)

08:33:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080011000104231cc88c37", 0x1f)

[  694.153192][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  694.159059][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:26 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xa00000000000000)

[  694.571186][T12600] devpts: called with bogus options
[  694.608584][T12603] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:27 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x500a0000}], 0x210, 0x0, 0x0)

08:33:27 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x600440, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x1e8, 0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x80000000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000000c0)={0x3f50, 0x3, 0x3b})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x4, 0x8, 0x9})

08:33:27 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

08:33:27 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080012000104231cc88c37", 0x1f)

08:33:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xe00000000000000)

08:33:27 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  695.397988][T12622] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf00000000000000)

08:33:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080014000104231cc88c37", 0x1f)

08:33:28 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xc00e0000}], 0x210, 0x0, 0x0)

08:33:28 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:28 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4c6)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0)
keyctl$chown(0x4, r4, 0x0, 0x0)
syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0)

[  696.424516][T12651] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:29 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x3f00000000000000)

08:33:29 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080025000104231cc88c37", 0x1f)

[  697.190130][T12666] devpts: called with bogus options
08:33:29 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/dev_mcast\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

08:33:29 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  697.475402][T12674] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x4000000000000000)

08:33:30 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0xc0, &(0x7f0000000000)="660a040684eca47216b4906e0b06e15f23b26696eb6db68f23d6ee145abaeb9f40cfdb1c8ced69a8a921e23f2364b66e7d7d728b6341ad829b417242ad97716ac36a7455591469ba2adfc232c79ecb0fe39a8e63f1d84285f8ae8bbb5c79e040780c868ecf9f03012426bff4b524ca45c97d17f74122a65e8aa77b516f7478edaff0eb89d84b2e286b8d5b8cf42136320989ed1c5829efd67508ba52a43a5c78e875f07bb4cc68bfc3f7d5c37a0daa8fc6b72e124e69a7f57954b3c7949147d7"})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x17)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:30 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xff000000}], 0x210, 0x0, 0x0)

08:33:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008003f000104231cc88c37", 0x1f)

08:33:30 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x4041000000000000)

[  698.313195][    C0] net_ratelimit: 22 callbacks suppressed
[  698.313206][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  698.324685][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  698.330523][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  698.336342][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:30 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  698.694285][T12711] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x6000000000000000)

08:33:31 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:31 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080040000104231cc88c37", 0x1f)

08:33:31 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x3}, 0x28, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x6403c0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
ioctl$TIOCCONS(r4, 0x541d)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'hwsim0\x00', 0x400})
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_dccp_buf(r6, 0x21, 0xe, &(0x7f0000000200)=""/203, &(0x7f0000000100)=0xcb)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r7, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:31 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  699.273165][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  699.279000][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  699.433190][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  699.439021][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:32 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:32 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x9effffff00000000)

[  699.673171][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  699.679034][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:32 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008005a000104231cc88c37", 0x1f)

08:33:32 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

[  700.362481][T12768] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xf0ffffff00000000)

08:33:33 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:33 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080067000104231cc88c37", 0x1f)

08:33:33 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)

08:33:33 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)

08:33:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xffffff7f00000000)

[  701.224810][T12792] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:33 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:33 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:34 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000801b3000104231cc88c37", 0x1f)

[  702.129771][T12925] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xffffffff00000000)

08:33:34 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:34 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:34 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x20a, 0x0, 0x0)

08:33:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080002000104231cc88c37", 0x1f)

08:33:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast1}, 0x1, 0x1, 0x4}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="fae91f478d2ddb4f44a7775c510132fb85c310d14240c4e76696aeb11a3868ecae62450432afa406f99f5b43199ca2c1b67765773f41390716a5bc3b44c9a4a67ffafa00fbeb4c2256d85ed46b5be7be89af4479c4d263ac96e2a9c96554ba1d1613fd8a1c514fc7eccd0a8522", 0x6d}, {&(0x7f0000000100)="3ebe705d0b07b835b902651402e7ec607aeda3fde1f12c3f30c0db31ccfa2fc77b7d6384bb405085fa8f322300588a95f56e0435f41db8f7c255093acbda2c6069ea3285224ce47380ec2006232e1a07cdacd448b821d65af671376c3c86db1f3bf750", 0x63}], 0x2, &(0x7f0000000200)=[{0x40, 0x105, 0xb60, "a4d46d2590c2bf72679a746989300d27aff7b01d4fb357547b5ed25f50ed5a80f98a2fba7c9ccbfb07ce"}], 0x40}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x400)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0xfffffffffffff000)

08:33:35 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:35 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  703.433177][    C0] net_ratelimit: 18 callbacks suppressed
[  703.433185][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  703.444696][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:36 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080003000104231cc88c37", 0x1f)

[  703.593167][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  703.599037][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:36 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:33:36 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x211, 0x0, 0x0)

[  703.833180][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  703.839015][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:36 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:36 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  704.233222][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  704.239068][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:36 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080004000104231cc88c37", 0x1f)

[  704.553175][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  704.559059][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:37 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000000010400"/24], 0x1}}, 0x4000000)

08:33:37 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:37 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000000)=0x10000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:37 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080005000104231cc88c37", 0x1f)

08:33:37 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x21c, 0x0, 0x0)

08:33:38 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:38 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  705.573205][T13240] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
08:33:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000300)={'veth0_to_hsr\x00', {0x2, 0x4e20, @empty}})
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000002c0)=0x1, 0x4)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1ce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x585}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0xf0}}, 0x40)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

[  705.726663][T13240] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:38 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080006000104231cc88c37", 0x1f)

08:33:38 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e22, @loopback}})
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:39 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  706.473316][T13283] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:39 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000000000008000000000200000004150000"], 0x1}, 0x1, 0x0, 0x0, 0xbb06a48000596ab6}, 0x0)

08:33:39 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x282, 0x0, 0x0)

08:33:39 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
sched_setparam(0x0, &(0x7f00000000c0)=0x6)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='\x86et\x00')
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x1, 0x7, 0x9, 0x5, 0x8, 0x0, 0x5, 0x7f, 0x8, 0x6, 0x56, 0xfffffffd})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x6, 0x5, 0x45, 0x2, 0xd, 0xd8, 0x8, 0x8, 0x200, 0x9b2, 0x1000005, 0x975})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:39 executing program 5:
socket$caif_stream(0x25, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:39 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:39 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080008000104231cc88c37", 0x1f)

08:33:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000003200190100000000000000000200000004000000935e56b0003c3b7e82a0798448e634dae73a6bb81362aabde7d26db963ae495aabb58035898feeef04000df14c6e2b31b31f04e3a44e44a6022d10f9f507f44b683f80ebd08c90"], 0x18}}, 0x0)

08:33:40 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x68000, 0x0)
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="3916b8399eae60ba6d814e7b175c368e0545f4233597e5f7f5a0ea502723053d90")
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x81, 0x0)

[  707.648738][T13314] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:40 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:40 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:40 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x2, 0x0)

08:33:40 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0xff9f, 0x32, 0xa094fe7f429e39ce, 0xfffffffe, 0x0, {0x2}, [@nested={0x4, 0x8d}]}, 0x18}}, 0x0)

08:33:40 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080009000104231cc88c37", 0x1f)

08:33:40 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  708.713167][    C0] net_ratelimit: 22 callbacks suppressed
[  708.713177][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  708.724728][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  708.730559][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  708.736365][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  708.803509][T13376] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:41 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:41 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x4, 0x0)

08:33:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x1000, 0x2000, 0x6b38, 0x0, 0x10001})
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, 0x12, 0x119, 0x0, 0x0, {0xfe}, [@typed={0x0, 0x31, @binary="8d825f0a7ccf1d1f9d386e78cb1703b2b195400f4eaf2f5157e14edbb41a158f50f7888bfa806b77af81db973667079f3f24b515d2784247375f2fd2e5d684c716b51f723318006334db4a1ca23e9407165529510e8368e85542b7f83b62fe66826ef378dee9768d"}]}, 0xfffffffffffffe4c}}, 0x0)

08:33:41 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008000a000104231cc88c37", 0x1f)

08:33:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:42 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  709.673165][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  709.679020][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  709.833177][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  709.839015][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:42 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  710.083222][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  710.089057][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:43 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008000b000104231cc88c37", 0x1f)

08:33:43 executing program 2:
openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x8, 0x1f}, &(0x7f00000001c0)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@initdev}}, 0x0)
setresuid(0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0)
listen(r1, 0x9)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
poll(&(0x7f0000000100), 0x2000000000000333, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept(r2, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000000)=0x80)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x14)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:33:43 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x14, 0x0)

08:33:43 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:43 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  711.125061][T13615] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:44 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4464af4445b4faef, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000000)={0x6000, 0xfffffffe, 0x1000, 0xfffffeff, 0x5b20})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080010000104231cc88c37", 0x1f)

08:33:44 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:44 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  712.004427][T13739] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:44 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xa50, 0x0)

08:33:44 executing program 2:
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1, {}, 0x7fff, 0x4})
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x32, 0x119, 0x70bd2b, 0x0, {0x2}}, 0x14}}, 0x0)

08:33:45 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:45 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080011000104231cc88c37", 0x1f)

08:33:45 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:45 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xe40, 0x0)

[  713.322443][T13889] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:46 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:33:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r1=>0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2a0, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x28c, 0x0, [@typed={0x8, 0x1c, @uid=r1}, @generic="d6d5888a2772c5c743a41d6c5b7e629c8308aa5d6c2d66fe049dfe2626a9935efe00e7243aa23cb977be728fcc786442bb3737e70efa417c98fa29bab3af3d2fd4e27bd101dc6914d1fd067f60f94c154bf76a9faf77f0c6e9d72b8830a367a8e792a3fb66295b845697f6263e99ba129a724b0c0eac59563930f8587513ba112c13f25f36a869fe82e7fe717e8f8c850d8e1a3b160954c02b3de48c2a", @generic="ed9a58f039023ae325a5871bd011a5dccb6db8797c99be1b8ea80206d26a05", @typed={0x8, 0x85, @ipv4=@local}, @generic="950cb1ad4e35c4cf2b239e3cb2255d4c205ae18892ab82cb6b0c97d6604bc5a0c8842e44294952e6385d16cc626f3d072fa84b9c6f8a2423ce5cb3b744ff065fa24dd9ac9bac71b27682935062d5c2b5b3e24a66e0804653092474132c24a4a9a27437a8b314c955143ec2c4759ba1005d000d3147a3bbc146f54b39d48bdef8c21d7d688416541580e419790aa3a69f81552ca74fe58ec7fd9519aeb155039de3a799322fb8bf26d42be78d7c112f57ec7bead79d6e5fdb88aa9918b357d453b08977b356e857b57fef5132d2a91e710003d037af91e6b41e72fe55ad", @generic="a7113ec327f4c6e2b1a49e8b96b39319d83bd1d5c8a17531c8fb795622bded04a99541252dd1854d406946f9c4a760dc1d2ef0ec9e2a2c22f91030a350edf0faed0fe89ee161a05013c320244628176b037958be840ee74fffbacdf6d2c4129a05728b2e690c0a03a655992db5aa89085d021a25b9f6c0e5f309f4e2c6cef37cd67901bd4b5424812bfd9670d8a621caacfbe77cbb9b81bed9521c2261159ed007519891209881874cb2b515eb62f4946960f453f00e3dc6da4728be9676fe25011ed93552ac51bb2dfb99b7add77b", @typed={0x8, 0x1e, @u32=0x5}, @typed={0x8, 0x93, @pid=0xffffffffffffffff}, @generic]}]}, 0x2a0}}, 0x1084)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20c0, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000400)={0x8, 0x4cef, {0x0, 0x2, 0xf800, {0x3, 0x6}, {0x2, 0x7ff}, @const={0x0, {0x4, 0x7, 0x4, 0x6}}}, {0x97327bcf341fb46a, 0x9, 0x5, {0x7, 0x20}, {0xcd, 0x17b5}, @cond=[{0x9, 0x6, 0x3, 0x1, 0x8, 0xffc}, {0x2, 0x40, 0x3f, 0x7a, 0x1f, 0xfff}]}})

[  713.833178][    C0] net_ratelimit: 18 callbacks suppressed
[  713.833186][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  713.844725][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  713.993168][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  713.999037][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x14d000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x2, 0x3, "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"})

08:33:46 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xec0, 0x0)

08:33:46 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080012000104231cc88c37", 0x1f)

[  714.055754][T13909] netlink: 640 bytes leftover after parsing attributes in process `syz-executor.2'.
08:33:46 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  714.233172][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  714.239083][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  714.427219][T13932] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:47 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  714.633209][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  714.639042][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:47 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x1400, 0x0)

[  714.953196][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  714.959026][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:47 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080014000104231cc88c37", 0x1f)

08:33:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000032001901000000000000e1ff0100000004000000"], 0x18}}, 0x0)

08:33:47 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:47 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  715.477725][T14048] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:48 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x101000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:48 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080025000104231cc88c37", 0x1f)

08:33:48 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:48 executing program 2:

08:33:48 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x3f00, 0x0)

08:33:49 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[  716.834004][T14073] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:49 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0xfffffffffffffec2}]}, 0xffffffffffffff78}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
sendto$unix(r1, &(0x7f0000000140)="137825be643ed43fcc561ec2453fd26d701f8bea35c431184fcbf02f31853059f9a6c9362f3ece1c65bd7387c9632a7e287d5bc977afaf1c1fe9802ce7d50b2f1134ef4fe651f679695b17a4a6f64f9963ad8e220272ee102b2162dff1f1274ccd63cdd7af19b2e6812a778d4ea63d3e0a049c10b9c428e7be84e6a75d54b279598278d9746f0bb1243efed658984a", 0x8f, 0x400c0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

08:33:50 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

08:33:50 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008005a000104231cc88c37", 0x1f)

08:33:50 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x4000, 0x0)

08:33:50 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  718.269579][T14230] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:51 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

08:33:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:33:51 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080067000104231cc88c37", 0x1f)

08:33:51 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x400)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
r4 = dup3(r2, r3, 0x80000)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x9f\xd6\xed\xd4\x1fO\xb1\xe1\x99\x924!\x95\x14w{\xec\xfc\x82\xf3\xa5xD<R\x9d\xbe`\xa2\xe3\xa0\x19s\xeb\xf6uf\x05\x1c\xdbm\xe8\x1daF,\x1c\xab}\x8c1]\xf1!oA\x98\x15\x8b\xb0\\\xba\xb5\xc0\xf5N\ba*h\xab\x7f?\x15\xb3\x87\xf3\x8f\x9f\xb8\x8d2\xda}\xef\xbf\xbcT,n\x00\xa8\x9c\x85\xdb\xe9\xb2\xf9a}\xd2\xcd\xbdb\xf4\x7f\xb0\x1c\x00'/131)
preadv(r7, &(0x7f00000017c0), 0x199, 0x0)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0xffffffffe0004000, 0xfffffffffffff000}, {r1, 0x0, 0x10000, 0x4000}, {r4, 0x0, 0xffff7000, 0xfffffffff0000000}, {r5, 0x0, 0x784e68caadaffafa, 0x10000}, {r6, 0x0, 0x2000, 0x1ca593ee57c96057}, {r7, 0x0, 0xfffffffffffff000, 0x10000}]})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0))
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  719.113217][    C0] net_ratelimit: 22 callbacks suppressed
[  719.113225][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  719.124733][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  719.130572][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  719.136347][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:51 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:51 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)

[  719.565645][T14299] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:52 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x400e, 0x0)

[  720.073197][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  720.079061][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:52 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000800b3010104231cc88c37", 0x1f)

08:33:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2a, 0x36, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x2bd}}, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200, 0x0)
write$P9_RLINK(r1, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x400, {}, {0x4, 0x8, 0xf7, 0xff, 0x7f, 0x3, "a959d2d4"}, 0xfff, 0x3, @offset=0xbf, 0x4})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1, 0x4)

[  720.233196][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  720.239024][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:52 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  720.473247][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  720.479081][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  720.496936][T14393] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  720.577262][T14395] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'.
08:33:53 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)

08:33:53 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080000030104231cc88c37", 0x1f)

08:33:53 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x500a, 0x0)

08:33:54 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x32, 0x119, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)

08:33:54 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
prlimit64(r2, 0x1, &(0x7f0000000180)={0x0, 0xa}, &(0x7f0000000200))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000140)={0x4, 0x8, 0x1, 0x97, 0x0, 0x1, 0x1, 0x9, 0x7f, 0xf9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
write$P9_ROPEN(r4, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x48, 0x0, 0x7}, 0xfffffffa}}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x80000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0))
lseek(r5, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0))
ioctl$TCSETX(r6, 0x5433, &(0x7f00000000c0)={0xfff, 0xff, [0x8, 0x2, 0x388, 0x9d, 0xf], 0x6})

[  721.678903][T14519] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:54 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)

08:33:54 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001030004231cc88c37", 0x1f)

08:33:54 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xc00e, 0x0)

08:33:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@rand_addr=0x9, @loopback, 0x0, 0x4, [@multicast2, @rand_addr, @empty, @remote]}, 0x20)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000140)={0x3, 0x6, 0x8, 0x8, 0x1, 0x6})

08:33:55 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:55 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fa", 0xa)

08:33:56 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0xb2)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={r7, 0x8}, &(0x7f0000000140)=0x8)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x4)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r8, &(0x7f00000017c0), 0x199, 0x0)
write$UHID_DESTROY(r8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:33:56 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001020104231cc88c37", 0x1f)

08:33:56 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:56 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xff00, 0x0)

08:33:56 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={<r1=>0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x40000000, 0x8, 0x3f, 0x8}, &(0x7f0000000000)=0x98)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r1, 0x43, "3959e859c8e0323f158c4459fae5e0911c815a4d6c18920c1776bc768f34a9f8ce648f5d356c77b581caaa700c390a892896c306cb60e136e5acd12787a58ad89707b5"}, &(0x7f0000000080)=0x4b)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

[  724.243173][    C0] net_ratelimit: 18 callbacks suppressed
[  724.243182][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  724.254699][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  724.393166][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  724.399059][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:56 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fa", 0xa)

08:33:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x40, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  724.643166][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  724.649054][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:57 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  725.033424][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  725.039288][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:33:57 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001030104231cc88c37", 0x1f)

[  725.353172][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  725.359046][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:33:58 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fa", 0xa)

08:33:58 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
sendto$unix(r0, &(0x7f0000000000)="1d6f601a377e388bf5e741f49a79b14f7880752c4d997c2e2d4a78ab7ea2d4ba9537f977a667d8ac03", 0x29, 0x4048000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:33:58 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x1a000, 0x0)

[  725.672217][T14797] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:58 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:58 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001040104231cc88c37", 0x1f)

08:33:59 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057", 0xf)

08:33:59 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x34000, 0x0)

[  726.742903][T14931] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:33:59 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:33:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0xd0, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0xbc, 0x0, [@generic="b27ef87963189e61275edca0e5369a7c12735d52d7bfb817155092f9cb8a5f9f2d63823c23e9f465d350f0647767871ba5f204c2b81e0bed3c70b86f29c56a43237b29e109b05f1138991e846156db4696cadd1590c94e6d0c08d76beefbc5340f9e36e9c596f2bb801ac7cc667b7f83c6ded0cb1ec2ed834bbfefe3c4129b3bbbdb85868cede2b2999e2c5c9cfaca3afe78f284c9de95a93c110e8120aaac641e4de92587fdfeb55820cac5da01e73b7e22db56d4"]}]}, 0xd0}}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40001, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
socketpair(0x1, 0xa, 0x4, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]})

[  727.333414][T14952] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'.
08:34:00 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001050104231cc88c37", 0x1f)

08:34:00 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057", 0xf)

08:34:00 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x40000, 0x0)

08:34:00 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x10000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000))
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000280))
tkill(r3, 0x3c)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0))
r6 = dup3(r4, r5, 0xc0000)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000180)={'HL\x00'}, &(0x7f0000000240)=0x1e)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
ptrace$getregset(0x4204, r3, 0x207, &(0x7f0000000140)={&(0x7f0000000040)=""/149, 0x95})

08:34:00 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  727.947081][T15046] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:00 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057", 0xf)

08:34:00 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x202000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x4, 0x0, r1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x32, 0x119, 0x0, 0x0, {0x2}, [@generic="285fcf292188a6769cb19e2b071edd75917e1a6bb5169bd1379bf6a2582001a0b4366eab0fc8c74cf51546a7af1ea7f8691e31a3f7f294e73b4a0ccc33a072d7c4ca0e9bb35b9247b663312116a162d1f6b7bba733a08c70039cb5aed702b875fe36dbd4fcd7334c270041e3fe747af966b5ff5fcb015a40ceb93edca31987511904f77918cd987374dd0a06600e6808a41486e8c36ece26fbdcdac6fd9728f1c0f5"]}, 0xb8}}, 0x0)

08:34:01 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001060104231cc88c37", 0x1f)

08:34:01 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  728.858591][T15087] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  728.944800][T15089] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:01 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2", 0x11)

08:34:01 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x400300, 0x0)

08:34:02 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001070104231cc88c37", 0x1f)

[  729.513176][    C0] net_ratelimit: 22 callbacks suppressed
[  729.513185][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  729.524849][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  729.530714][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  729.536562][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:02 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:02 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x44040, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x5, 0x82c1)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10001, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000200)={0x0, 0x125, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d16b6fa1", @ANYRES16=r5, @ANYBLOB="250000000000000000000300000014000100ff010000000000000000000000000001"], 0x28}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200d0120}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000da06365252403f58b03a10d74719885bc6158f0597b2c0fa3794e875c5707d1c3b1795998933e05c139d6ca064ae5657364857", @ANYRES16=r5, @ANYBLOB="08002abd7000fbdbdf2501000000080003005e02000008000300e37b276d64443325c0184f10"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40020)

08:34:02 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x0, 0x3, 0xf913, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x32, 0x119, 0x0, 0x0, {0x13}}, 0x11}}, 0x4000)

08:34:02 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2", 0x11)

[  730.084833][T15204] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:02 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xa00100, 0x0)

[  730.473200][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  730.479086][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  730.633201][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  730.639078][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:03 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:03 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000800010a0104231cc88c37", 0x1f)

08:34:03 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2", 0x11)

[  730.873195][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  730.879069][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:03 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:03 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
get_robust_list(0xffffffffffffffff, &(0x7f0000000100)=&(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000140)=0x18)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001880)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000001980)=0xe8)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='caif0\x00', 0x10)
preadv(r4, &(0x7f0000001740)=[{&(0x7f0000000280)=""/107, 0x6b}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/250, 0xffffffffffffffee}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/61, 0x3d}, {&(0x7f0000001640)=""/201, 0xc9}], 0x7, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000019c0)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x1bc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1a0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xb42}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x1bc}}, 0xe6340a6a7a5840f2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  731.358452][T15346] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:04 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:04 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c0", 0x12)

08:34:04 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x1000000, 0x0)

08:34:04 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000800010e0104231cc88c37", 0x1f)

08:34:05 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:05 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c0", 0x12)

08:34:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x359, 0x32, 0x119, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

[  732.560055][T15481] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:05 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
r5 = dup3(r2, r0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={<r7=>r6, 0xb}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r7, 0xfffffff8, 0x1000, 0x562}, 0x10)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x3)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0))
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r10, &(0x7f00000017c0), 0x199, 0x0)
connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x1}, 0x1c)

08:34:05 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000800010f0104231cc88c37", 0x1f)

08:34:05 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c0", 0x12)

08:34:05 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:05 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x2000000, 0x0)

[  733.549027][T15504] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:06 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = add_key(&(0x7f0000000380)='L\x05g_jey\x1d\xf8\x9d\x0e\x94\xebT%X\xc8V\xdb\xa8\xb9%\xa7eI\xd4\xa1\x9e\xf7\xd5:\v\xa2\x10\xa2\x7f1\xd3&\xde;\x89\xa5\x00vE\xa0P\x92`\xef\x95,\xb5Zg\x90\xbc\x96\xc0u\x06\xb27\x0f\x18\xfe\xf3T\xea\xa0\xf3\xcc+`H\x88z\x9ba\x1e\n\x890\xc5\xc4\xd0\x93\xc3s\xf6\xcaY\xbe6\xf7 \x81\xac\x87\xc9\x1b\x9a\xfepq\xf5\xd3\x98\x9e\xa4q\xce\xb5B\x04\xe9\xda\xaf\xa81\x16\x99\xdb\x1c\xbeP\xcf\x04\xdf\xc7\x8e', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000000)="67e0e40e36c7615fa74e62fbcf180aedce8dc4fdf0a8fa06bb31fbae", 0x1c, 0xfffffffffffffffb)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000140)={0x1, 0x0, 0x100, 0x1, {0x800, 0xf03b, 0x5, 0x39ee2cce}})
keyctl$revoke(0x3, r0)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$get_keyring_id(0x0, r2, 0x10000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x70044080)
r5 = dup(0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@remote, 0xffffff98, 0xad8d2e0893c4e926, 0x2, 0x1, 0x6, 0x3}, 0x20)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x121002, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)={0x53, 0x7fffffff, 0x3, "41b51c61ced93ee6e53c4c542ac67a83e97538a47d520423f251363c185f629ce789a0386f46aa362ef7b79e1ae37efca4978ce9c5006e2f64eae5ed8364f0c07f72b411336375e7d8885bac1c65e603072bde"})

[  733.908483][T15523] Started in network mode
08:34:06 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001480104231cc88c37", 0x1f)

[  734.007909][T15523] Own node identity , cluster identity 4711
08:34:06 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  734.111915][T15523] Failed to obtain node identity
08:34:06 executing program 5:

[  734.203258][T15523] Enabling of bearer <eth:caif0> rejected, failed to enable media
[  734.359730][T15552] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  734.633155][    C0] net_ratelimit: 18 callbacks suppressed
[  734.633163][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  734.644717][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:07 executing program 5:

08:34:07 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  734.793235][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  734.799064][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:07 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x14000000, 0x0)

[  735.033169][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  735.039004][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:07 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0xfffe, 0xe22, 0x101, 0x1, 0x11, 0x2, 0x6, 0x7, 0x2, 0xff})
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000000)={0x3ff, 0x4, 0x518e})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:34:07 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000800014c0104231cc88c37", 0x1f)

08:34:07 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50000140}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000001)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = getpgrp(0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0))
stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$nl_generic(r4, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xbbcb9f8297a156}, 0xc, &(0x7f0000000a80)={&(0x7f0000000340)={0x728, 0x34, 0xccfd121bc67d11ae, 0x70bd2a, 0x25dfdbfc, {0xc}, [@typed={0x8, 0x1f, @pid=r5}, @generic="5b62766de50a566a92a0e5df14eeeba817ff08161bfd4938653b47194d64e113d30467a6fa9f73992e88ba5d6a18abdfd3a4297fa67abdddb1549bf7ffb30c72bf105b6553591254eb96b1ffbb0c5b4582e82e52e16bfd9f062459bdd040ca058f2dec5098681f8a1a0c7d8e682184fe1c9af432f911fd7248599254f152731803b72fd9a90709c4811ff6e0fc99ec7e4bfe928a62aa7d6c28ca317e9d93b75a2296fb46ab290baf4390cb0fb15517d297b13e9dea745b844241e45d8998601abffc7cadfc0233d1760821747a600621b02e5d7bb0444c5c276f908c717a7c373e62fb04e9414d8e444ea819e8698398235afa", @nested={0x2e8, 0x66, [@generic="b9c9d0886c30fdd45fb5a7568d93beee3751be84c18f812fe0927f6618bf407ce6fee5a05a37f62433f7421eed6a033664718e406e8f6b89baaf9c51d0de92cd9b59cefadb39b80a532d4f9816aa7c334bc7d701925c5e912f9ecf52531c59d8c9adb37ed143ac3b91df0493235707bce761eb6e43ba644efcd8b87d9edcdf9bfca5efb7df578e86a9b2c6e9aac3a91f3d683cdd8c2e8c7547a279da26a3313c2c07d6f962efb37ceb698186d013704daf43c826940e44c65619aa789444b22770ec9fe0d86220fa106ae0bc5e219abe5688c51a1f333caf26795dbd3957df95fffbe084e23255631631235585bfbdba071de7f14a", @generic="5a5b316159c778e216588e515d876fbc7eaeac9aa5ef6c809fad2bc1e6d2e038890181d54f349856a5f18271f161d31686727f4731bf2ce5013e5e012981fd9da2b8c7844a9f42be699d1942f55e7f45a5cfa9078f01f80d06ff563b9b916458195e1aeda562959827a62a4e6f7766b5fbc13eb431670a4480e1adbb95ed40f674f61b4bac71bce8cfbb6552143e5ad8e82b6073db08f58a7acf4a193785d14c645a0661e0a976b592fd799842e0889ec933382ad9e2b08d81afef044c445bb01bf18ddb43a1543a533f70b4762d77645170252807fc6537268d8694", @generic="1d6c58c4721050740ed6593ff5f3c83a4573a798549e36f0cc144bfa730f44ddd3cf3ffb55d42253741429b4e337f5b5838c9eecfc710b1d8fb5ae0accee47fbcb41c0f090f82f87cc9a5ea9a86ee3d4130aff0aa249c9949e77551fdfeca2a51f72aee210d4a239a91d40a05a0512c34a2be7", @generic="3209c5578cf71474012d498268ba9eadf1f7b1d6d788c26b9865c40dc1b4a8816450cdeae62becddf0a747477a28567371e4f043658207f28c1174eeb71408b6b0a7205a5efcd4e280c81587857d31526dd590e449ca2553f0902579b3f31c0c5cddc27d6afe0bf4a171b73d99858c4733ba7a3b342ec148f880ec901f85b1324a5d3c9c3eadb46fdb7c743d09eec304e69761dc164466eba1591dcf32"]}, @typed={0x8, 0x17, @fd=r6}, @nested={0x238, 0xe, [@generic="424e553f205e3ca7078754c5d6f38ee79fc63711312c96abba57d935944e5557d5ba61e29a67de0f7e07e1933973cb5b72e373efc00109a530dde473fd6d200b0fc8cadaa7004d089bbd7be293b80b4240918fbb34635adceb0c62447d8d05a7ac2d3bafb91b4184778d5f8428f4960c78f365126b5646e250cc516d747e1a7b808ce8fab4ac607bb353a39430e8cfcc6d49b4f90b29747902f6f0137cd686871d4cd62bb3f81ddfe0650601255320d81a2b6133b7c4c9d601ba4da33c283cc445dda4ffa389b12cae58285221c4cd132db83e89b9d7314e57b4ab66cc172cb4a2a6d90dd34d9bc8ffb8bab929a40f5aa8562d14db545ba1", @typed={0x8, 0x24, @ipv4=@local}, @typed={0x4, 0x75}, @typed={0xc, 0x1b, @str='TIPC\x00'}, @generic="4d979d1754e9862f6f958d77db4db3fd9a60028b933841c917dd18a548961116f2ddae", @generic="c80332f7a01d84b5ce7aa572ce4b8ad5eb6a7a2f779c56e8e4083580d650b2da06b34d2e332f702116342a6e90", @generic="1ebe1b019c80e5fdd280dbbf3082cd39b469565549723176004d318d8287a63dea9ea1543b688cc8a424a32bf15faddbf38f4e44de6ee22e6d375b91d24178c555bda4f4c5f4432ccb23266304684810a5ceaf1bb5bcb1d7fe3701255c3f2846e1a39b0c29fe2966a43e", @typed={0x8, 0x76, @uid=r7}, @typed={0x4, 0x91}, @generic="e1d17e8e653349af26bd7ce29e90b151adc213f24c3a47cab0b2c099352a918d57e042321a05d3ab1153fee91166c6ac5aa607ff54fb16c488c67bc9fb3cf22b6c5ed3a9109f31c7a203f3e54dddb87fcf03c2df39b6021507696f"]}, @nested={0xa8, 0x75, [@typed={0x8, 0x24, @ipv4}, @generic="a6b5658a82434ba925", @typed={0x8, 0x47, @ipv4=@remote}, @generic="3214f5bdfab572fc862657a4746e6d3d9d4a5181e4eaeca9f0f8e36f5c5c2fe66c83ee691056ea2b30ebd126abfa3d023dff7c277e71ff", @generic="53c854bfb933dcf7ce5b7bfc15916b810d1e4b7c527da6e82722fa8d0316c07ca1be978c0d15dbc8e29e8ca9c5849314963e508e4de9bfe90af97cffc02209f42a113ced5acd760d32b14629fc1fb1e00a201e"]}, @nested={0x48, 0x8c, [@typed={0x3c, 0x3b, @binary="2202c5fe65b528937b4f018014d2a296dec4408134f29f4c4cd3c38be88465fbd3af01bd28c22b48279243a26a7dc8f02edb35cb4d38"}, @typed={0x8, 0x7c, @uid=r8}]}]}, 0x728}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:07 executing program 5:

[  735.406417][T15667] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  735.421887][T15668] Started in network mode
[  735.433199][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  735.439033][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:08 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  735.498436][T15668] Own node identity , cluster identity 4711
[  735.553823][T15668] Failed to obtain node identity
[  735.673331][T15668] Enabling of bearer <eth:caif0> rejected, failed to enable media
08:34:08 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001600104231cc88c37", 0x1f)

[  735.753189][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  735.759075][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:08 executing program 5:

08:34:08 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x3f000000, 0x0)

[  736.165071][T15759] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:08 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
r2 = getuid()
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x16c, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0x0, [@generic="dd06361e5df51c5e851d5ba00ce85bd569cd4a7f6a9be69a729ba851512548307feab5aa3182c4d2515e049df80e6b7d0ad4044d2512c09ce23f7f4c4546e23bb8ff7489a4d62ddaeda4f375420376ab1f202b38af60b620f385164d21f53463515f36bf1ed880f545b2dc62b8085720ed2ab4bfd147b531e21572a26f7f52046776d25f909e1ef78254c72e99b62c18ca", @generic="ca87b715cb2503d3581b6ee7fb2e1d5152f11bcd1421902ce45bb974", @typed={0x0, 0x29, @ipv4=@local}, @generic="cf0177c93c2ac361e88042e5aa748c20894fee07b9cadb3b73da09093f519deb8ed3fa957b32eae180938a1fe405b8c4ae885048a9f3fd29a57b75c242b47c89eba3f213b8945929f11686937f51633764a0a00eaefda2bee2682865576da86447c24de557ac18f4a5702283c5f23f0acb886b9368b1ffab672b3737ced7855b416c7dd9baa81f56ce0afcac46d33763bca1a31221258263f2b52d17", @typed={0x0, 0x92, @binary="20a75f2dd2b6495fd9691576b5ee962d56041a9ad49686b133e9810384a99d9312dce1ccd5b948a2921460070c5f19433fb4fd1c47e47c15695e6cea447a01891aba1546867737d51a2ee49408c9b5713b5003991a18edc6029a4c02"}, @typed={0x0, 0x3c, @pid=r1}, @typed={0x0, 0x2d, @uid=r2}, @generic="5b50457ca0e803921f1f807346e14ef676c904f886f3930775ec70b3986f3b379f94234365f11ee948d62452c5f6d64bbf660216eacca1f2a2bfa4ac1043e27128ccd5e3f13cc7328122ea12137165839bdf938d853895bb797d5ab2908dd07841692758e44ae8e2618160865d1543d04092ba6817108c1b192b333381185743df580e13b23560be9cacf7c46781f8dc8b4346c74551f2b12b8f5da734d84cd78886de6c25f48a4e2cf8ed818f7ea2e038eea269b7f8c8efd75b4242c55f8ecce38a2bf735896f8bab62e3"]}]}, 0x18}}, 0x0)

08:34:09 executing program 5:

08:34:09 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001680104231cc88c37", 0x1f)

08:34:10 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0xd3ef0d1ab1664698, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000000))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  737.527424][T15899] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:10 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:10 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:10 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x40000000, 0x0)

08:34:10 executing program 2:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x401, 0x21200)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x9, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="18001ff6cedbd300003200190100000000000000000d0000000400000074ffa04867e5d20da783bfebd1a6e4308f59e16d8e38e9"], 0x18}}, 0x0)

08:34:10 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:10 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000800016c0104231cc88c37", 0x1f)

08:34:10 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  738.419929][T16025] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:11 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:11 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:34:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x113501, 0x0)
r2 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x4e20, 0xbcb3, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x67, 0x0, r2}, {0x4, 0x8, 0x3, 0x4, 0x0, 0x7, 0x0, 0xffffffff}, {0x37, 0x90, 0xfe00000, 0x17e}, 0x1000, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x0, 0x401, 0x1ced, 0x7fffffff}}, 0xe8)
sendmsg$nl_generic(r1, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f00000028c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x1308}, 0x1, 0x0, 0x0, 0x84}, 0x800)

08:34:11 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001740104231cc88c37", 0x1f)

08:34:11 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x400e0000, 0x0)

08:34:11 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  739.186457][T16096] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:11 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:12 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f30501000800017a0104231cc88c37", 0x1f)

08:34:12 executing program 2:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x44102)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x200)
syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x6, 0x8c00)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000032001901000000000000000002000000049b12c127de94e050b8b7f441c183b04a4d9f11ee7973fb42091250ee27ee304bb8edac06c3e4b3b65834912731cce75bcc038eee418bc1a7b43fbfd7655d60fb942cddb79f203bf37b713446fd4cd7470200"/120], 0x18}}, 0x0)
write$P9_RLERROR(r0, &(0x7f0000000100)={0x1c, 0x7, 0x2, {0x13, '/dev/snd/controlC#\x00'}}, 0x1c)

[  739.913253][    C0] net_ratelimit: 22 callbacks suppressed
[  739.913262][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  739.924780][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  739.930630][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  739.936473][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  739.944149][T16203] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:12 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:12 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:12 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x500a0000, 0x0)

08:34:12 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000304231cc88c37", 0x1f)

08:34:12 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1b)
ioctl$KDSETLED(r0, 0x4b32, 0xe3db)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:34:13 executing program 2:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x454200, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000002c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x401, 0x7ff}, @window={0x3, 0x0, 0xff}, @mss={0x2, 0x7e00000}, @window={0x3, 0x8000, 0x1}, @mss={0x2, 0x1}, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x5, 0x6, 0x7fffffff, 0x0, 'syz1\x00', 0xffffffe0}, 0x4, 0x1, 0x6, r2, 0x2, 0x9, 'syz1\x00', &(0x7f0000000140)=['/dev/dlm_plock\x00', ']\x00'], 0x11, [], [0x0, 0x2, 0x1, 0x67e1]})
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:13 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  740.759140][T16325] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:13 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  740.873162][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  740.879046][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  740.923207][T16325] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  741.033171][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  741.039047][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  741.273177][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  741.279063][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:13 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000140)={0x39, 0x8, &(0x7f0000000080)="a517de0028dd7259dadf7fae8b67b1dcd0ae425aabc6d6d262985058", {0xe9b5, 0x1f, 0x686868b2, 0xd, 0x9, 0x6, 0xce6054d302e2e9a1, 0x5}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:14 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000504231cc88c37", 0x1f)

08:34:14 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:14 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:14 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xc00e0000, 0x0)

[  742.101642][T16451] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:14 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:14 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x800)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:34:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fff, 0x58000)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r5=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r5, @in={{0x2, 0x4e20, @broadcast}}, [0xffffffffffff7b4d, 0x9, 0x6, 0x3b46, 0x3, 0x7646, 0x7f, 0x3, 0xfffffffffffffffb, 0xffffffffffffffe1, 0x7, 0x0, 0x1, 0x5, 0x9]}, &(0x7f0000000080)=0x100)

[  742.373244][T16451] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:14 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

08:34:15 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xff000000, 0x0)

08:34:15 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000604231cc88c37", 0x1f)

08:34:15 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:15 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x173)

[  743.180714][T16524] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:15 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0)

08:34:15 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x4000000000000, 0x0)

[  743.383607][T16524] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r3=>r1, r2, 0x0, 0x2, &(0x7f0000000000)='-\x00'}, 0x30)
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='t\a\x00\x00\x00\x00\x00\x00\x00S\vrlay.u\x8eper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x84, 0x2, 0x2, "5b7c2594e560d2c8f81150b14b6a5521", "7ad069532312214ed44ed4bfb774d500ce7874e8236a3967903655e7f6913def14c74c07a89577f865168fafe079515fd40fea638c96558116f12a5ff3fce89fdaaaaeaf6f17ddbceedf19abde5222e10e15b4c569c3ed6c20572b6e585f57c1112a8fd5050a0f9f128c644b901ba6"}, 0x1d4, 0x4)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x36, 0x119, 0x0, 0x0, {0x2}, [@typed={0x0, 0x5d, @pid=r3}]}, 0x3}}, 0x0)

08:34:16 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000904231cc88c37", 0x1f)

08:34:16 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

08:34:16 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:16 executing program 0:
pwritev(0xffffffffffffffff, &(0x7f0000001e40)=[{0x0}], 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='md5\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000500)={@broadcast, @empty, [], {@llc_tr={0x11, {@llc={0x0, 0x0, "05fc", "23b1ecac4c9d4c5fd9833e82e121735a98d48e805abc2fbf5f8fcb03d20f1a9032b5e34cf84da9c5affe4b7fc9a44bbb5265558772c28efee7147b3c6db6027fa3089d02bebdc8f2b827827d8775c88a45642d0317b2e458a1f7aa327b3fd2f377aa1d7cc6e19382120bf8c67b417b97d1"}}}}}, &(0x7f0000000240)={0x1, 0x10004, [0x0, 0x0, 0xf55, 0x66f]})
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000005c0))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x70bd26, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mkdir(0x0, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00\x89 P\x0e\x1e\xe94\xbd\x03\x16\x9d\xff)F\xb2$t\x1b\x84S$\xff\x8e\x14\xe0\xaf\xf3\xed\x94Y>\x95\xe2\x99\xa9(\xd9\x8cG\x19\x1ey\xec\xfb\xc7|]a.3\x0f\xa4\xba\xf9p\xf8\xd1\xec?\xf9\xff\xa4\xa8t\xc7a?\xf0\x8d\x93\xf9\xf9\x1b\xf0\xb6\xe1\n#,\x92\x8cI\xe7\xcc_\xf5\xeaVrN\xa3\xe2Z,>\x03\xaa\xf7\x88', &(0x7f0000001ffb)={'cyz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)

[  744.293223][T16624] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:17 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffff14, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x32, 0x119, 0x0, 0x0, {0x2}}, 0xfffffffffffffc59}}, 0x0)

08:34:17 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x40030000000000, 0x0)

[  744.463294][T16624] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:17 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:17 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

[  744.704746][T16633] devpts: called with bogus options
08:34:17 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000a04231cc88c37", 0x1f)

[  745.033170][    C0] net_ratelimit: 18 callbacks suppressed
[  745.033178][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  745.044738][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  745.066687][T16720] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  745.193162][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  745.199028][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:17 executing program 0:
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0xff, 0x0, 0x200, 0x114, 0xffffffffffffffff})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

08:34:17 executing program 5:
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:17 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

[  745.314643][T16720] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:17 executing program 2:
socketpair(0x25519f817359989f, 0x1, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0xfffffffa, &(0x7f0000000140)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x32, 0x400, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

[  745.433206][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  745.439047][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:18 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000b04231cc88c37", 0x1f)

[  745.833221][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  745.839128][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x400)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchdir(r0)
flock(0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYRES64], 0x283)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x40000)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
creat(&(0x7f0000000400)='./file0\x00', 0x0)

08:34:18 executing program 5:
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:18 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xa0010000000000, 0x0)

08:34:18 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback}, 0x10)

[  746.153182][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  746.159051][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  746.160121][T16866] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  746.279150][T16866] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x103, 0xdc, 0xa7, 0xff, 0xd0, @random="61ecb7d054b8"}, 0x25e)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000080511096871e1c7f37e160bd055575322256705a9a10f1a4400b84e8f910916b0731090721f0bf8383bb561a75b40156779dfc73f2b2f5b20d199a582fc04d8d29797ec84fb23b9e74bc1e125d8e8f9993e9967f84adfb475bef08256bbccd7c51be1a936140b77b842038e00a7c5ab3f6b5dcbbd7efc5f65aa5eb11d729aaaf683d7a2866503f4fa2422490d5f8f27ad39521ea791d213f8165d819f39e6254ac42b73c70d37f1945f0528bf2ae54", @ANYRES32=0x0, @ANYRES32=<r6=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000)
r7 = socket$inet(0x2, 0x4000000805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = dup3(r7, r8, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0))
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000001c0))
dup3(r10, r11, 0x80000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r12=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r12}, &(0x7f000034f000)=0x2059b000)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={r6, 0xffffffff, 0x80000001, 0x1, 0x9, 0x4, 0x5, 0x1, {r12, @in={{0x2, 0x4e24, @multicast2}}, 0xabce, 0x80000001, 0x9, 0x9, 0x8}}, &(0x7f0000000080)=0xb0)

08:34:19 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001001104231cc88c37", 0x1f)

08:34:19 executing program 5:
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:19 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback}, 0x10)

08:34:19 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a80016004000010002008c5762c6000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b4169ecbee5de6ccd40dd6e4edef3d83452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

08:34:19 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000140)={0x0, @reserved})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

[  746.982938][T16890] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  747.148025][T16890] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:19 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  747.280437][T16903] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'.
08:34:19 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x100000000000000, 0x0)

08:34:19 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback}, 0x10)

08:34:19 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001001204231cc88c37", 0x1f)

08:34:20 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0x3e2)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

08:34:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x180, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x86b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3b8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x17aa56e2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8e1f}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfc40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xde}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x9d676294f0196941}, 0x544edf922035c8f7)

08:34:20 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  747.835343][T17017] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:20 executing program 3:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

[  747.883236][T17017] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:20 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$admmidi(0x0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)={@remote}, &(0x7f0000000380)=0x14)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x8, {{0x2, 0x4e24, @multicast1}}}, 0x88)
listen(r1, 0x400000001ffffffd)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
prctl$PR_SVE_GET_VL(0x33, 0xb0d3)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

08:34:20 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001001404231cc88c37", 0x1f)

08:34:20 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:20 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x06\xa0\xff\xff\xff\xff\x00', @random="0100040c8b10"})
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  748.375111][T17129] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  748.473798][T17129] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:21 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0xfd83, 0x0, &(0x7f00000001c0)={0x2, 0x4e24, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x19b)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0xa0646c8ba7caa2fb, 0x4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r4=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r5, &(0x7f00000017c0), 0x424, 0x0)
r6 = socket$inet(0x2, 0x4000000805, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = dup3(r6, r7, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
ioctl$NBD_DISCONNECT(r5, 0xab08)
sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r9=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)={r9, 0x80, 0x2, [0x6, 0xfffe]}, 0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r4, 0x1}, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x1bd, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000017001000000000000000ff000000080072005d0000006451147a9f714093bd444b92f814522a08d84e3e7efc2466e556d4074e436e86ab33d86a7d9755cee895d2093a2ae545ae430e7f04b13c6d0c4db384e296ea39f9f747baec156e608ff9397c04237351153b59a76f00bb09d673e27201ad42ac02b7e81669ec5be069e93cf28b132e5bd845624b54b9de9a283385e6274f7dd586addd7de5cad998ddef1159e8f289a8a2b3bb210310b52cb0309b3d74f3fe050000006182a6e3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

08:34:21 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x200000000000000, 0x0)

08:34:21 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:21 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001002504231cc88c37", 0x1f)

08:34:21 executing program 3:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050102080001000104231cc88c37", 0x1f)

[  749.122951][T17221] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  749.203702][T17221] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:21 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:21 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x80000, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000440)={{0x4, 0x19df}, 0x4}, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0101000000100000000000000000"], 0x14}}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x8c1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x228}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x70a7cc97}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffb}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xfb6ce811c2d44c68}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x14}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x24}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)

[  749.384967][T17274] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
08:34:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001003f04231cc88c37", 0x1f)

[  749.541758][T17274] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[  749.567830][T17281] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'.
[  749.748828][T17300] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:22 executing program 3:
r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x7, &(0x7f0000000040))
writev(r0, &(0x7f0000000000), 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x10000, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x7)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)

08:34:22 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  749.831532][T17300] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:22 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:22 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x1400000000000000, 0x0)

08:34:22 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001004004231cc88c37", 0x1f)

08:34:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
dup2(r2, r1)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000032001901000000000000000002b80000040000003c2ce25dde30ff69001a38d1192567490cb7b9ad37332ee53c74910dfa2c2a2f68f3912f88584e14976751254c2219da8b47e492cef23007db7b7628be5ea497ce"], 0x18}}, 0x0)
ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000140)={0x5, 0x8, [{0x81df, 0x0, 0x7}, {0x6, 0x0, 0x80000000}, {0x8000004, 0x0, 0xffff}, {0xa, 0x0, 0xd09}, {0x7, 0x0, 0x3f}]})

[  750.248542][T17414] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'.
[  750.313189][    C0] net_ratelimit: 22 callbacks suppressed
[  750.313197][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  750.324710][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  750.330531][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  750.336330][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:22 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:22 executing program 3:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e0000}}], 0x210, 0x0, 0x0)

[  750.375973][T17418] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  750.475923][T17418] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:23 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001005a04231cc88c37", 0x1f)

08:34:23 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/30, 0x1e}, {&(0x7f0000000880)=""/170, 0xaa}], 0x7, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
recvmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000140)=@tipc=@id, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/57, 0x39}], 0x4, &(0x7f0000000400)=""/90, 0x5a}, 0x2000)
r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002200190100000000000000000200000004000000"], 0x18}}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000004c0)=<r5=>0x0)
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/mixer\x00', 0x34af9fcfcb58752, 0x0)
accept$alg(r6, 0x0, 0x0)
write$P9_RLOCK(r6, &(0x7f0000000a00)={0x8, 0x35, 0x2}, 0x8)
fcntl$setownex(r4, 0xf, &(0x7f0000000500)={0x2, r5})

08:34:23 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  750.802483][T17529] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'.
[  750.870556][T17532] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  750.933258][T17532] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:23 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:23 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:23 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001006704231cc88c37", 0x1f)

08:34:23 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x3f00000000000000, 0x0)

[  751.273160][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  751.279018][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:23 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:23 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r5, 0x0)
unshare(0x40000000)
r6 = accept(r5, 0x0, 0x0)
write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0))
preadv(r8, &(0x7f00000001c0), 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000000)="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", 0xfd, 0x20008000, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)

[  751.412008][T17655] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  751.433181][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  751.438984][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @remote}, 0x16, {0x2, 0x4e23, @multicast1}, 'veth0\x00'})
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

[  751.523372][T17655] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:24 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  751.673181][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  751.679064][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:24 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008000101b304231cc88c37", 0x1f)

08:34:24 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:24 executing program 0:
r0 = socket(0x0, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000003200000200010000000000000200000004000000"], 0x18}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ftruncate(r1, 0xffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8)
mount$9p_xen(&(0x7f0000000000)='*vboxnet0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x200a000, &(0x7f00000002c0)={'trans=xen,', {[{@privport='privport'}, {@uname={'uname', 0x3d, '{%\'-em1wlan0'}}, {@afid={'afid', 0x3d, 0x3e0}}, {@mmap='mmap'}, {@aname={'aname', 0x3d, ')mime_type'}}, {@uname={'uname', 0x3d, ','}}], [{@fowner_eq={'fowner', 0x3d, r2}}]}})

08:34:24 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000204231cc88c37", 0x1f)

[  752.143338][T17781] IPVS: ftp: loaded support on port[0] = 21
[  752.450441][T17803] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:25 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:25 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x4000000000000000, 0x0)

08:34:25 executing program 0:
r0 = socket(0x0, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:26 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r5, 0x0)
unshare(0x40000000)
r6 = accept(r5, 0x0, 0x0)
write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0))
preadv(r8, &(0x7f00000001c0), 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000000)="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", 0xfd, 0x20008000, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)

08:34:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000304231cc88c37", 0x1f)

08:34:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x32, 0x119, 0x0, 0x0, {0x2}, [@generic="bcacc12c831ec93da3b39f44b4b2050796a34ecac0b027f1e09cf1dbeb61ec4c1b68db55018ac046a29d6836b8e89a689491a6b90f91e7fe535dbf5296fa43436dc16d5d9a60973dfa74ddd3d5a65298463769f7856150b6fcb92abbf00316b772480e73a44be2b237c232371c2b41a3b62f1e1e5229a233f323f2c6e5"]}, 0x94}}, 0x40000)

08:34:26 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:26 executing program 0:
r0 = socket(0x0, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:26 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x400e000000000000, 0x0)

[  753.908276][T17943] __nla_validate_parse: 2 callbacks suppressed
[  753.908286][T17943] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'.
[  753.934964][T17941] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:26 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  754.033748][T17941] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:26 executing program 0:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:26 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x981003)
socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x6, &(0x7f0000000280)=0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000002c0), 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xfffffda4, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x779bfb66}}, 0x4)
ioctl$TIOCNXCL(r0, 0x540d)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x5404000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x105, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x88001}, 0x2)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000400)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
fcntl$dupfd(r2, 0x406, r4)

08:34:26 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000404231cc88c37", 0x1f)

08:34:27 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  754.602625][T17950] IPVS: ftp: loaded support on port[0] = 21
08:34:27 executing program 0:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

[  754.678401][T17973] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  754.794984][T17973] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  755.433180][    C0] net_ratelimit: 18 callbacks suppressed
[  755.433189][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  755.444701][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  755.593174][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  755.598996][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  755.833174][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  755.839012][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:28 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r5, 0x0)
unshare(0x40000000)
r6 = accept(r5, 0x0, 0x0)
write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0))
preadv(r8, &(0x7f00000001c0), 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000000)="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", 0xfd, 0x20008000, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)
r9 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r9)

08:34:28 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x500a000000000000, 0x0)

08:34:28 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000504231cc88c37", 0x1f)

08:34:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4, 0xfffe}]}, 0x18}}, 0x0)

08:34:28 executing program 0:
r0 = socket(0x10, 0x0, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

[  755.995168][T18105] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  756.063228][T18105] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:28 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:28 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  756.233192][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  756.239052][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:28 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000604231cc88c37", 0x1f)

[  756.529989][T18114] IPVS: ftp: loaded support on port[0] = 21
[  756.541624][T18119] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  756.553189][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  756.559051][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  756.665507][T18119] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:29 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:29 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x7a000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r5, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r8], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r7, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r9=>r7})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r11 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r11], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r10, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r13 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r13], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r12, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r15 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r15], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r14, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r17 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r17], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r16, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
r18 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r18, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r18, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000740)=0xe8)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r22 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r22], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r21, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r24 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r24], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r23, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
r25 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r25, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r25, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000880)=0xe8)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r27=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r28 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r28], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r27, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r29=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r30 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r30], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r29, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9cb94089f25c4a08}, 0xc, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x6e4, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x24c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r16}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x220, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r21}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x622}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9b2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x776}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r26}, {0xf8, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x773b}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r27}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xe101}}, {0x8, 0x6, r29}}}]}}]}, 0x6e4}}, 0x40)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

[  757.443465][T18137] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
08:34:30 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r5, 0x0)
unshare(0x40000000)
r6 = accept(r5, 0x0, 0x0)
write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0))
preadv(r8, &(0x7f00000001c0), 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000000)="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", 0xfd, 0x20008000, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

08:34:30 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xc00e000000000000, 0x0)

08:34:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000804231cc88c37", 0x1f)

08:34:30 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:30 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x42000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
close(r2)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000140)={0x200, 0x0, 0x1, 0x1})
recvmsg$kcm(r2, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000180)=[{0x0}, {0x0, 0xfffffdf2}, {0x0}], 0x3}, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r3, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r9, &(0x7f00000017c0), 0x199, 0x0)
bind$xdp(r1, &(0x7f0000000080)={0x2c, 0xd, r3, 0x39, r9}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

[  758.125841][T18256] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  758.193658][T18256] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:30 executing program 0:
socket(0x10, 0x2, 0xc)
write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:30 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

08:34:30 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000904231cc88c37", 0x1f)

08:34:31 executing program 0:
socket(0x10, 0x2, 0xc)
write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

[  758.785056][T18262] IPVS: ftp: loaded support on port[0] = 21
[  758.793648][T18284] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:31 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c031", 0x13)

[  758.937179][T18284] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:31 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0xff00000000000000, 0x0)

08:34:32 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r4, 0x0)
unshare(0x40000000)
r5 = accept(r4, 0x0, 0x0)
write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0))
preadv(r7, &(0x7f00000001c0), 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000000)="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", 0xfd, 0x20008000, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)

08:34:32 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000a04231cc88c37", 0x1f)

08:34:32 executing program 0:
socket(0x10, 0x2, 0xc)
write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c37", 0x1f)

08:34:32 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[  759.592524][T18323] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:32 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[  759.692789][T18323] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:32 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, 0x0, 0x0)

08:34:32 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000b04231cc88c37", 0x1f)

08:34:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x118, 0x32, 0x2, 0x0, 0xfffffffd, {0x2}, [@nested={0x104, 0x0, [@typed={0x8, 0x6, @fd=r2}, @generic="4ed78567739a2b20a85fea1311b1a5b6b8a78c97515ff227cfac7db00b6df75fbe2b5f80769a97215255882a489bb0a7debb03edc2b2aceec3cd59daae51fd1684735294e752cf408e8c16eeb98dafd1f1f644bf0e18ed750cadcb2c294d67dc40116310967beeefbe9131d605d7dd572473e061e5e7cbf7bd63757a4bacd0601efe40b051f0fb32d30dcdf34b4d25f3d630dd643a1fc4d93b6577694f07061a23d67778e0b3ab651d49d50e195372bd9c3c0cc3032e33e19df1afebed8463a13ae8338c", @generic="f924f5b8f904aac0cad4d214d812482b5e910cf6d9a86f3e9a626bab403dd7d9b6d5de498d2e59252a193b9bf0ca8cdf5a71"]}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x800)

08:34:32 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, 0x0, 0x0)

08:34:32 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
accept4(r1, &(0x7f0000000140)=@x25, &(0x7f0000000000)=0x80, 0x800)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)

[  760.234456][T18413] IPVS: ftp: loaded support on port[0] = 21
[  760.248770][T18431] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:32 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[  760.349224][T18431] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:33 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, 0x0, 0x0)

[  760.713194][    C0] net_ratelimit: 22 callbacks suppressed
[  760.713202][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  760.724843][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  760.730681][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  760.736495][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:33 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0))
preadv(r6, &(0x7f00000001c0), 0x0, 0x0)

08:34:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x1}}, 0x8d8700ca2e2c9008)

08:34:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001001004231cc88c37", 0x1f)

08:34:33 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)

08:34:33 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040), 0x0)

[  761.153840][T18561] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  761.233289][T18561] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:33 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001bc0)={0x4, 0x7fff800000, 0x0, 0x7fff, 0x5, [{0x0, 0x101, 0x3, 0x0, 0x0, 0x104}, {0x80, 0x0, 0x7, 0x0, 0x0, 0x2088}, {0x1, 0x1ff, 0x2000003, 0x0, 0x0, 0xe0c}, {0x5, 0xfff, 0x2, 0x0, 0x0, 0x2000}, {0x1f, 0x9, 0x7b25a9c1, 0x0, 0x0, 0x2000}]})
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x500, 0x1b8, 0x0, 0x1b8, 0x1b8, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x4, &(0x7f0000000000), {[{{@ip={@local, @multicast1, 0xffffffff, 0x1fe000080, 'hsr0\x00', 'yam0\x00', {0xff}, {0xff}, 0xc, 0x2, 0x4}, 0x0, 0x158, 0x1b8, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x9145, 0x9, 'bm\x00', "2c9ec5b1cf0064683b7199049bd6e1afb7ffd65007cc94d7f845e3b188ec11173b35f0426feaaef9326c218e4c4fe48aa57701a5ac2665a91bd6458e3c4b58fd4620ee77e42a2e351004c630370ed8b50cba01a13e152044397ed8890d2e09e88164237cb38047fc7dca4bf8f83a40b7f6aa43e9754169ba6ca5f9f1f0abf5b2", 0x5, 0x3, 0xfffffffffffffff7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7ff, 0xffffffff, 0x8000, 0x5, 0x1, 0xc24f], 0x2, 0x7}, {0xeb6a, [0x4, 0x2, 0xfffffc00, 0x8, 0x40, 0x4], 0x7, 0xca}}}}, {{@ip={@empty, @multicast1, 0x0, 0xff, 'syzkaller0\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x0, 0x8}, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack2={0xc0, 'conntrack\x00', 0x2, {{@ipv6=@empty, [0xffffffff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xff, 0xff000000, 0xffffffff], @ipv6=@loopback, [0xff, 0xffffff00, 0x1ff0000fe, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x1000000fe, 0xfffffefe, 0x72f55964f4e305ea, 0x6e0a50b3b350eb2d], 0xff, 0x8, 0x29, 0x4e20, 0x4e21, 0x4e24, 0x4e22, 0x0, 0x80}, 0xa463015a957e0e76, 0x282}}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x9}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, 0x0, 0x0, 'bcsf0\x00', 'ip6gre0\x00', {0x7f}, {0xff}, 0x29, 0x1, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@ipcomp={0x30, 'ipcomp\x00', 0x0, {0x4d4, 0x40, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'veth0\x00', 0xffff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x560)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000007c0)={@loopback, @multicast2, @multicast1}, 0xc)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000001d00)=""/140)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/audio\x00', 0x88000, 0x0)
sendmsg$kcm(r3, &(0x7f0000001b80)={&(0x7f0000000700)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000780)="6ba3a91a1fb0d73f2b53975380cdc02ae497fabc", 0x14}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="e43322212bddc5fb8538f696699243f550d762e93afa960194683d257cff8d4d24883e94aba383386768af37a8be1c31d62c6482788fdbc332119293ac661d75b519d379d78bc3d05beab7918ece44a37de4d0d66058607baa4c48af9e8b24b1f6abcd54f984cebde960a9a9ce9e951cc8d0d3998cb385bff7b9d8b65f5549c9aaf5eeae16d041ae6f8d64302ceda0b24ec0e66d5f2ba9751a30578975de56cff866d2507587b4a418", 0xa9}, {&(0x7f00000018c0)="edb4946b493b3a7e6065b216a3176ab7244f9c08825c79cf4974ee1bdcab87dbe40e7d5feb81a316ddcbc6c02030e0aa5c63c3af485a0f8217be882a77745223c6a92056d9560374b5df188fc287330ce0ff049684c8970b9b0d9cd345ededf2a7d35bc07c40e9", 0x67}, {&(0x7f0000001940)="e14a312425cf5658a24d13230ee98eee32aa58a6cbf5c352304174b71b9f4e683e1aa6c176f1cc4bde8c061e5e43646b4d", 0x31}], 0x6, &(0x7f0000001a00)=ANY=[@ANYBLOB="a00000000000000007010000020000000428a5dfc8f777aee2877bb354571b5abe6ec95ed61ecd2b0a5460873b11fd772a88180a42ad7ff5b5f8157a669181b06b6b36a692aab79c5e1f7885573d203b5d60316a35f86d61d093d8fcc97adc3c75c7e73b4256aa9adde33734dab32bc403b446df0167d08e6602872b57c5e733a9d91972b332c9013bb07ee92efca80b75f21e092a078932a215000000008500000009000000f80ea5acacd84f0461497420de8d320000000000000000c7e409be0f8edba65c44f796470ec16361091bf93c9afee593199c8454c6e2e3ea8c7deea0205deaa2180bca34d85c0db57cd3540e55a032fc2a20d2ef3d49f6726d3794080810f420f294b97538b7c81fcd1f8bc5814ba66868b2c24198dfc69cf9c867c9232a18be8ee040257ccb8bb640565554705dc713444a2a980000000038000000000000003f8702ba01000000b3d129eca6ca14f940462f69b8063d64027b952d9f2ab7f7c720318d55ec89fc30143656e09a503d"], 0x180}, 0x40a0)

08:34:33 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)

08:34:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7311000000009b12c31eae2c08f5193a5b492b926355290010"], 0xff86)
close(r3)
socket$netlink(0x10, 0x3, 0x4)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x2}, 0x10)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:33 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001001104231cc88c37", 0x1f)

08:34:34 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040), 0x0)

[  761.654963][T18580] IPVS: ftp: loaded support on port[0] = 21
[  761.673916][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  761.680385][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  761.747130][T18591] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  761.813351][T18591] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  761.833197][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  761.839075][    C1] protocol 88fb is buggy, dev hsr_slave_1
08:34:34 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040), 0x0)

08:34:34 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0)

[  762.073171][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  762.079002][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:35 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0))
preadv(r6, &(0x7f00000001c0), 0x0, 0x0)

08:34:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001001204231cc88c37", 0x1f)

08:34:35 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/nfsfd\x00F\x93\xb0 \xc2\x91\xa80j\b\xe4\xe2\xc4s=\x10\xd1\xa27\x9b\x02\xf8#[\f\x8d\xaa\xbb\xe1\x8b\xbe\xbb\xee\xcc\xb8\x8a|rL\x83\a\xfa:\xd3\xf4gf-\xe0a\xa3\xef<T\xbfA\xa6\xd9Au\xdfG\x01:\xe9\xee1\x8b\x9c\r$\xbfE\xdc\f\xaab\\\xc3\xd0\xaf,\x9f\xd0\xd9\x0f\xc8\xa6\xa2-\xf8\xd5\xea\x90\xfd!\xf5\xa4\xa7\xc1\xe9')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
inotify_init()
ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1)

08:34:35 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000", 0x10)

08:34:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x1)
getsockname(r1, &(0x7f0000000180)=@hci, &(0x7f0000000200)=0x80)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x5, 0x34be}, 0x18)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000400)={r4, r5, 0x1})
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in=@loopback}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xfffffd72)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x400, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9)
syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x5, 0x8d581)
sendmsg$nl_generic(r0, &(0x7f0000001680)={0x0, 0x3b5, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000001e00000302000000ffffffff01000000a2df5788704c61bdb2ca6fb29f3775c358307dd2355c238c4afec33a6c4762e32bd80604ccf4356207dbf582de244ff2f8e7a9b4de3f926d48492d1b424743907b3c29c102912661f1f1b826c1a15639fbc423d28b4a184e0d9d2f8bdd4d902d29963b7c418ac57457e527fa48819a02c6ae3af29ac71a1180fa52dab208673830aa234f65dc151920ec378f97258605ef669a88d4fa91f87294accbe427484315e273cf75a763d8576f95c3bde6af1f3a0bf9b3abc14f6f2d1865fb5f7b"], 0x18}}, 0x40)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000240)={0x7, {0xfffffff9, 0x6, 0x2, 0x7, 0x1bd0b185, 0xff}})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0xa9, &(0x7f0000000140)=0x4)

08:34:35 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fa", 0xa)

[  762.720350][T18710] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:35 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000", 0x10)

08:34:35 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x4e20, 0xbcb3, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x67, 0x0, r1}, {0x4, 0x8, 0x3, 0x4, 0x0, 0x7, 0x0, 0xffffffff}, {0x37, 0x90, 0xfe00000, 0x17e}, 0x1000, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2}, 0x2, @in6=@local, 0x34ff, 0x1, 0x1, 0x0, 0x401, 0x1ced, 0x7fffffff}}, 0xe8)
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="f33ca120d9f176554f030be2f5c0fb4bc27fed9b67e70a6b6253923bbeb53afca10486ae8d1271763b381cb1eb81af752abed8ce015de516e99629c99f575d8c150387868658142d1484e0f1f92ddbc236716e64dcfc5d8f1a9e8cef86403e911ff6a4b501f6c98e2ffa629953aa1fe49567d5f289a6a398ca9e3944a53a3b07a709641477e7a4175b2b890893ed1d66c21be9754636d6960cb2fdf2f02e7ccf9c57146a9c5171b2464f672347a31dafb8e9b6505391ae08d0c0e599b17c7e3fcc6c6a4d5cda", 0xc6}], 0x4000, &(0x7f00000002c0)={[{@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x1}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x101}}, {@subj_role={'subj_role', 0x3d, 'wlan1..+em0\''}}, {@subj_user={'subj_user'}}, {@dont_appraise='dont_appraise'}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'proc*\\'}}, {@uid_eq={'uid', 0x3d, r1}}]})
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)

08:34:35 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fa", 0xa)

[  762.881781][T18710] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  763.025646][T18710] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  763.093570][T18710] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x100, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0xec, 0x0, [@typed={0x14, 0x44, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="a6339bf4c4667440abaa39199d255260930a6619edd6e1fbfaea5270148f0bddc842688b0c1994ef3f73d46f7182c9b4e138047e04d9d20504c70c0f64b6e4d0173d3ca6d4ba8fd254167f4a4e2bb35ceadeebcaf26edec0f56ee232ac63617ddf47820443c40b50234324fb0871727df8d9", @typed={0x28, 0x55, @str='vmnet0{em1vboxnet1ppp0vmnet0^em0]]'}, @generic="ec0c95df0a6bbac422bc964d1d14cce3c96aeb23bc69e45a49090de0cae18a63ecc1d3d3955be0d413f42993d78dd164b1eefad15a451a69"]}]}, 0x100}}, 0x4)

[  763.153650][T18727] IPVS: ftp: loaded support on port[0] = 21
08:34:35 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000", 0x10)

[  763.311167][T18740] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.2'.
08:34:35 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001001404231cc88c37", 0x1f)

[  763.673945][T18753] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  763.764381][T18753] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:36 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0))

08:34:36 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x28000, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x2})
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140))
socket$isdn(0x22, 0x3, 0x23)

08:34:36 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fa", 0xa)

08:34:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)
socket$netlink(0x10, 0x3, 0x1)

08:34:36 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010003000100", 0x18)

08:34:36 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001002504231cc88c37", 0x1f)

[  764.413761][T18773] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  764.422250][T18773] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:37 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010003000100", 0x18)

08:34:37 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057", 0xf)

08:34:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x6, 0x410480)
recvmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000280)=""/168, 0xa8}, 0x40000003)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@remote, @remote, 0x0, 0x2, [@remote, @remote]}, 0x18)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:37 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0))
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=<r2=>0x0)
ptrace$cont(0x9, r2, 0x800, 0x3f)

08:34:37 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001005a04231cc88c37", 0x1f)

08:34:37 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010003000100", 0x18)

[  765.088633][T18890] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  765.187128][T18890] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  765.197552][T18880] IPVS: ftp: loaded support on port[0] = 21
[  765.833157][    C0] net_ratelimit: 18 callbacks suppressed
[  765.833166][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  765.844729][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  765.993180][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  765.999039][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  766.233216][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  766.239030][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  766.633265][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  766.639093][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  766.953159][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  766.959030][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:41 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)

08:34:41 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057", 0xf)

08:34:41 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001006704231cc88c37", 0x1f)

08:34:41 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231c", 0x1c)

08:34:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x1, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:41 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
shmget(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xc0, &(0x7f00000002c0)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x80000001, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x2, 0x10001, 0x3}, &(0x7f0000000240)=0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r3}, 0xc)
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000140)=0x1)
r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x0)
ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d)

08:34:41 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231c", 0x1c)

[  769.409646][T19045] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  769.440622][T19045] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:42 executing program 2:
r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:42 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057", 0xf)

08:34:42 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000102231cc88c37", 0x1f)

08:34:42 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231c", 0x1c)

[  769.697476][T19063] IPVS: ftp: loaded support on port[0] = 21
[  769.725173][T19066] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
08:34:42 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x10000000000001c5, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="a400000028a482ff915af99275fcb178a5feb9263ad12fad114e4a69deba6ea178dc59aa3d756536aec0099780c898249a964c2c5b3fb3b1d1fd07b285cca6a76b3f82bea3274797558c094c343da60ab0c4f81a431acc97e417e25bf12431a32d1932c0a79fa87b3f78e08b4e2b2bb9345c990d88d13b99137bb831dc692103028320ce29e9336970b2e0b3b0e684c425051a31dc3d3475308c9bc60bab0d07dc1f3c6ba58d1e7e"], &(0x7f00000000c0)=0xac)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x7}, &(0x7f0000000140)=0x8)

[  769.763366][T19066] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:42 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)

08:34:42 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000103231cc88c37", 0x1f)

08:34:42 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2", 0x11)

08:34:42 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c", 0x1e)

08:34:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x34, 0x119, 0x70bd29, 0x0, {0x2}, [@nested={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe633bbd8380efa96}, 0x0)

08:34:42 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r2, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0))
fsetxattr$security_smack_entry(r4, &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000380)='$\x00', 0x2, 0x2)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000340)={@loopback, r2}, 0x14)
syz_mount_image$exfat(&(0x7f0000000140)='exfat\x00', &(0x7f0000000180)='./file0\x00', 0x2abdd6f6, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="27f3b58e7c72cfe1ae76516bc96f56ff396781df660cfafdf23ba8edeef549192191ba14920fd2bc68f0e28351abfb4a3852e9c2f392853bdda0b11102d1b4b067970744886edb4361dea0cdf08e6bc1138cce0a47d38119ea9daa5aa366d30ea9e735670d02992efa46f55cd9a71bc30ddd6b5b593f13a8f745a3e7fbe52358d1fdeddcbe35f003ab1cc3595f366315633bd357bc0c1b7b14aabf36f4529615cf50e76929d231315c97800376f41110e9f8cfeb1d07b22a226257c33b361b0ea01be2fa0066a50538e9ff1aa53f229f02501230caa5b5993217963d4208d5b3cc2821465537", 0xe6, 0x2}], 0x800000, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,nam`case=1,smackfstransmute=self#@vmnet1:self,\x00'])
sendmsg(r1, &(0x7f0000000100)={0x0, 0xd5f8aa77fe64f336, &(0x7f0000000780)=[{&(0x7f00000003c0)="eeddadb8ff83dd63cd46a53803f3dfe1460ea300be7cced6a6cd3d762da06e6d2ac3d577157b146834a82aeb3fdfa03f6f8abc1f969333958856358c94c093e8d0168929a45928172d5fe61ef9c0c653d2e0f5ff7fb88a62eb0161357e897787e544c13dc98dd673cf92de575b248f1e809e5c571d8cc22638da3a5ea06ff8c855a509651fffaf959daf9642cb361f154b9b9decb641774ba61ce4cdb2c78b6fcb470fb0c07e8aa85d09ad7e48b4e9c5bc284bf4207d2d23fb5d3edaa1ff8452d3154d77331b2f5a9a55d6eecb24a399f4", 0x11c}, {&(0x7f00000009c0)="30bfab9f7d67ab466437dc3e5aa5ccd32c818e906ed5f8c8bb430e0314ab82bf05c80f905b918727187d1665a10cc8b6f32606910cc032dc04c913e752b47bb0b380235a7c36ecb22e9630ba62d4d42bd9dee307fffc305abb2b5351c3c9c21306abb8c21160b54cc17e54820c62072ca8e615f04a39366a1d4695f659ad7fa4949afaac655125dc69f9957aa589784dedf1f4a443aae35945598d8a271e87044231adba1d76e82f80f2df433d198960179ed20a1a3766d62250b393ac7782b2a91488edaa94d52034f6f180a83bf05d8be702d2854f0a91155c201b4c49ae413542d929c87491cc834d905964e8d0ff309b3fa190408987bd67de4a72eefd5b3eb0c1d7ef30c3526d80b8fe5bb49e01b92ed2fe6e64df2bfc0f0679cdc7f009e1358418c7516f7ae25b82361f7242e269c0767172fce060a859625b1fa2b39dfef5de13fa1c48ed7469d30a8c838c9a60b3cf1463b7d4df90f531a5e1ec60a8493458e99c9e810e7d2539768a1a24378a5107153fa150557ca3522b4c7938379e18a0a1ce49a14958f61784d306667e2872fec8f20b8929d048dadb89488a36cabcc89b71802110fab3c7b74efd969d7f579ae1634862280e21324fcef93820f34a335b604fc3fb96b63883a935a1260cd12bb64d90b2cfe1fa4ac4619e3a6f16164aedd3e784891b8ce3055f0e8678ce0cb6a8bba6cbedf0126b10f8c140ed8cf2c1787ccb9f29f7b63034ef7b541d5bee465f8685728f898d96039af8a05443307a781a533192f2877ed2c0dc77b0886cdde22174cfb82fcb203e5f6b66635f96e471ceb1d6815f2cab35706c1ae6b92e4f7869d10a14111803c79a49babc590c524d7c0ffd39176c338c4badbf8d2ad7c4c7be95673c518b284d220dda290099e163a7c6c869d39308f33715302c5ea5a9ad610126a5126bde6a394fb71aff4ccc7affdfbdb7c000033cb05e736315adc4c797a1dadc3c4e058b8110109c48371aab41189523a663a33eb1d526e107093b7d9496bae1422bac923128da35c0077d9107736d1cc87675ef4ed9eb28600bba8d98b741c9e3a8170b24e713c9a97bc6d31fa4d64cdfd055a8298121578b5efddbafe3a1c17aaa49ddab712efe31e3dcf0f45ca6a7857b0d3f3e8a562c3c460300c725e447ee13a2cb1b6f1dadf36195a656b3415205bf258527306a97ff9f3874b2573994e93d761e246ec859977b053fa82d247794ca165f7b394a73eb2b0ac1b15b3afa481de500543bb7a1c2aeef8c182e0f4997d3c248c065ef43ea760b545f872770c236ee2796ebb32f223cb9a4c9aaee9b0fe6756beec5e918cdcf613032d3be4eadf1a6e5291106bd976d96606519b0570175c590a5a5489bed4f4d594c926e11c6f98ef0b7ea0dc4faa8aa09c735df12d859b0809897a703a8bfd0709d919c3d64a252ff38d810b5e529a62c0dbac83c7daa5f6508ba849220435d291b81cce46d112023a262a215a2bfb95d2b73de3777b32ef2134d973bcf5d9a2981a72b87a2d03f6edd79fa6c428733d6e84cafffd4d11802daa1e7ecb9a90a514d22a1326570cf1d46681df68ac017b53f5181314a1a71659a798b2348ddda8cc51abcad042bcdb0571c8e8ea466a42514e3ed2d82c7f0a5ddcbec400da0901101e8e63e15b81222b326c84fdacee7da053609879c6e6c5f94b0d26c5d71b42276d3be00b312ad10b4a8824224201cdd3f300dd5bae07ef192e99e30945c3455f6cc5601e32ac3e79d7fcf4834cfb3f42014fb41a5cfecc606e8166b69a4550c0aeddbf27eb6c4e9cf50b1a64f7439cf4f5b485c3d68df025dac3c2563a9f03ecee896048a8335e0761956ccca3aef9e42b0a57347114fd1f9c844a91fdd3d4ef4e554206324455f1bed8258424defa19cefc3f4fe18bf8d48c9a25b77fd15cc8e291693a7ebdd3ce9ed6a91677f7d2af5236e8003bb19f99f67c0a855879cc798e012fcdb93f71dd6c977bd0724cdcfe86bc14228126a0b3bae48cad4a7666b4bf92bdb4025920b15fa79dfa2a346e6c5423becfe3a3d39521ebdc7ee124299323ecbf3c5138c90cd5d0a69e762b15d509a4a53cac9712949ff1b6e6d2ee2cd39792a55f3a0e1d22d4a8a61df84e94d840515edd5a672844c8cc3b9be3f23137c4885be7794f782b1b91738a822481eb6f988ead8f321b3afb8687e75b0a56ca20ea9f54ee34d08136369d493f90a56577e40987a5013db86beb4441c17943b31b0c26c6cd60107bb068d3e51c9e70483d3f82c7a13a4def6c2f02a1713be8d32382c28965017f766587f87841e2922865666943d0751e5f76d808bd5c4a999acc208db9223debb5c427d62680fe4c83b76178aaf0a860b6a6e04461ba14d4f7714f3641268814785351a8b52087e4fb8faf8ffad59276dadfce73289acf493096675a15cce5883a16f14488806c782ebb46f150e3678270959805246c2ee76770d484f7e9779c945d78dbfd41153f6b126a6ac1ce445be9e198b98016f95ea366b442ba6e7c826aa15dc9d88a619284a86cf222ce3f38b33832674aa5c45bff175f93bfd8604d65b31fb8c9f918de49cafe463d6ccd5dff1b194fd31c84f0022ad7f24c23e37b05b5507e813cf0cb5502df2683b599c07efd271f6e2a6d6f2f15fc676e33ffc742ea769409f51e20ee87b946a90755274a3a27ee230745cf70b1d5af11773e8c8fe4d394bc6c463eb4a52364fece2f4d883a0ec9c40a55dd8ad90977baef56aa1f8edc747940b43e93e3b08f17cd2f6c9112790928867d40c79ce8da0eb8a96105b188d4eb207d7eab677e7785c75c7f8eb61186acf25ce5f62fdb04ba905544ff0801688761491d7e239507161e9a3b5778da261673b7d9eefdc02e7d2afef5ab917f92d3b47565a2d72574266e3201b4468ddcab0ca404c6715799435b974c1e93dec0dd75bba95593cc8c4056faf4ed5779f68bb815fc65ec605d803b79e022a7c1273811a15d406389b54cb35c2843d1e0ec52836e389fed6eb69fd32db4dc1070a1a192bc58cec7a499e6905f2ab2d9726dff044bd851c9170e24edd7d65d80d7611dc3bcab3754cb5d5412a4f6e86b39156635b00959c0cbea326eee9b0de10de3e6628a9e1aca6bd118e53d46064e918df5a529875216b639f4193ca5c2190ae14b0b28a5b62df62cba73d708d7edba462135ca083adbe53799b3b30243b68c48179b3ed09d67a8860562f11bfbef4c7322ac36309ecd59d62d9e23128ea9219f46ae58a3599e8dcb040f91c9d57a04a83d930db5fc1a213b411be67c28b59b066d1774d2b00d72a87cbaee07e1a6a9033cfc6d231a3a18b475c7f38f4256237747a0e7811ed047322bc49753c1cb51414e317054c3f4b63413c935c6d9a19bc966c425f2d0fcdf8184df0be0ed0e77cb5765eeab602e5b646246edb4edd2823c6707e28593501f547af24bd6f176d0aa7d92c3ced61f570781378dbaac38d9ca5266f1150c38e75f9fcc2f6d9825007c0e43c1a9b40721ca0508bc80208ce29b7313c6180f1b6d6f31493086dffa073df880ca99578bcd0793f8f056fdab7266a277648ead5e30e405b9013b4c427050426d68c9b996df53655c0d109ac863c5c3d6dada244f4c61a35d0ab424f7a24a15c3ef103032688c83bd60a77b6e4eefc8ab11a92d7a81a6f2ad9b75224a3c3808ba0d7af29b023d38d1ffed1ff31f20647619eb46bf312ec30ff34b082c8c49eaff7ad68eeefeb45d1aca42f5315e2505b397232be978ec9255cafa0d677e46c61ad8ec74288622ed1c2b1a74cbdf5531030f443f3caaabbb5d4bcb0c67d91de48d04586203ad9f8fe4d26e8eb29e18cc2ef004226fc4a3baed5fd19c9d253c4db09f90f26aef8722cd810b8e08d6a20ebaac906168a1186a64336f59a2fad1afceec17e12629925d192f8e07b75b24f1a53c01fe22e9211a48efd8c226c0e89c6270ce4f79487352f4541f1c4a3656b2cd0b83841577e848a292135f3c56596aed6e3ce0ea79307adff2dcdd3fd8ed453e69a53e266f23005ab6388535a4702592a35c7512a22b6aa5bfdf2bbe8243d3479aaad2ab11079029edfbdc6c6631ccaab6a8a8a0956eccf62271e439cbd2e84392d4651cba02c3fed4afbcf9d98bc80379933d4d14b9f888c1f3afa87deb6e4aed98e9e6c102dddb240cc11dcf0c41ae36298e57e12063aeec9e213fef10bedc0e2328b945c96427489429dff3dc4a4c73b3f8d8a3e86cf0a4397338569c0073b3708dd1fc74663eae6e19f5c42e17fd660cbecccd036f48191141dbef51e982548f77f07a948498f010f4d861d8c7b5641211453a7a58a8038c119be1234f9d778cf736d8e83f7251fc441cc644aa7476bf8ab5ef7cf0f522c29041d7d96d30f57d485e49ba89ab56d2c6d46dd17e1fd7c1210b2e031c00a1b3e407ac56f78a1150bab5f6b7d47bd0fc219c1ed4b14c014441b20e8663ad3a88c430222a18a774eae7f50238bbc7ba47798673d196d753c316dda93db02496500e0be9a226e9bc970dbef40757840df43ddbd076956bb5e023fc2409d4ddb833ffd04e33826b898ce8bf76b43056e9f4caad79ca0039a29d02277d92d42e6a3dd58805099fe16f9f9d71c5463e37eab190f18f2cb6d960279913f4e98081592339e94b05312741953969687860ab1325891ae9d3defddac69315900a8956f77ec392f12df7b7c99671e5e8e557b879a02946d83ee3ef2e79e7e6bdfba5b07deff51abec50f4714e8182bce49d134648c759b1387985958d69361f096c3b9396e8a22096f86ba11d5e41a2c485c0be963dab4e038b9685850d9f32959ac388aed4667f2c191bccf9569b9aa573905b099c51a899d1786d465c561358d18bea487774273c910007c91f975f0a988766d1b85b28c0f44da3621a9bfda6ead176329b2b02fb3be3006989b4503c433c2d9949066021aee4914222d7e1e43aa52d8ce2e8680621d930e07a9bc2a3181b8ce2737bf03dd0d09749ceca22bbdcef02b8a5a1edced67a4624a1e6a16d2b4a48e1a4108f59ca36740cfed2a99dc275d393455682ba8afed11037fd8eef421c1fb215ec77f3b7a7b7bc27f15ce55e60be1ecd87fd2d8a2975fbc4be45b242a542e87d5c948d6b26553c3b4e53f2d91fa45b65854ed0d09ece8c0d71e06752fb3ca3e46ec0ac124eacc332b1e8484e05f980b0fcbd83fd630f54f97a2db58cc0e24cf0a0cac9d46186c5a4b49369b5c6bd850dbace3f6de1cf41cc41f1bbf287f816b6be523e1e8f7c1ad9d27891cba3a2a511322097399563ae0d7a067beda8e0384c5c184e0ffcf84585a99cb67617e5b9dc4b2802ab263240c172fb6da1b54aa4254a2681739615624d542f9ea661818dc2321613ab6b9a0725be0b98341cce469663a8562592d8496363273fbb07ce88dea9f4c88082cf4297f63eeca23015203e1df322bd2527a232afd6bc3228c0fd0a963c11f1cda1b1934345bfc8dd0cd82de57ac89b202cef8c040cddba57377687120ce79fdf40a9d2d2d5dafd8a51fdec14228cbfae4b37be667188fdc27329dd13819f278ee813e191403ec3d69ffb141e7facc1f04badd2655ae811949ee29e9c8d1bbe45b008486099307cfb0e84debff247c4036f3978eb4b5ef6861ee1b9d6554aa9c0acdb5b7c96fd51893ae0516036ac2ebe1b714e400fa13f7557b59ecb883269dbf54ee01f4e0f47d120810a85e5fa7a196d8f96d4caccf88bfec2194c87b7817a5f35f9ad5fc7250d333ae8ebf20a614fceb4a32364f669aa4f6972995ee43a"}, {&(0x7f00000004c0)="fdb39f6a7ce8a0178e3ecaa2ac11c5f11a79db7892d0bdf808a62314fbee05a23ef553efd8be0b3478fbd30de289176f7cb5ff22afca96b2791bb45142e245cdd52e7238280339dc86166cd61e14ec3f7b7b6f9750d11d97536ecead8b90be8334"}, {&(0x7f0000000540)="a51d75881654073847df4b10053d769f9f82f46d83114c0ad537eb106c17179d8d547c1c3e3229f8411382ec569c5372502157740a2d8fc3e6938f7caa58539d5a332a0250798267995683de8d44c4e5024a09eadc0fe334103d1214ec7bf69b6122c2485569955d94f0a09a03738903d604562e3bd8c452db495b39d08890bd54f1a2b5806b8ba547fe953907713e2a6ac8b3456d08832c9fc4fedc2ea99f519e4ae39cc68be76ee0326b810b9a6a168161a1"}, {&(0x7f0000000600)="4176c9df51876415e67c2edc74e2422e2796aa115053f66d94f951594bcd668f0e7f797c913d2e874e333f7d102d162271d9e31b7fb7d400aa2ba931fc6e2e3ff78c17857adeed59ed578335b96812c865f15bb446918cd2b333f1320b0987dc661a801e5266f806e890de534afd3e7cac5a2253fddae72b0126781478f5d2f5c5ca042f4a1ac9d881bc54be2c7650fca11e43882cb94e7131ca4ee31be05060cd5d0716d119aaf68169656fcd8388bba2451d095cbba5"}, {&(0x7f00000006c0)="30000460e4e284"}, {&(0x7f0000000700)="f9e9fb9ca406ffe48935ee2e2089554a83d3251be6874472d35b8bd6b53565f3daf0b69d6f8fb3a5a805a5a3b5b2ebba354c1c3d4bdec7f6ff81684fbe5149d6804ba059aa"}], 0x1, 0x0, 0x28f}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r5, &(0x7f00000017c0), 0x199, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x57})

[  770.338302][T19191] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  770.369321][T19191] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:42 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c", 0x1e)

08:34:42 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2", 0x11)

08:34:43 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000105231cc88c37", 0x1f)

08:34:43 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20004, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x4400, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={<r3=>0x0, 0x401, 0x0, 0x4, 0x4}, &(0x7f00000001c0)=0x18)
r4 = fcntl$getown(r1, 0x9)
mq_notify(r1, &(0x7f0000000580)={0x0, 0xc, 0x1, @tid=r4})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x48, &(0x7f0000000200)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x101, @rand_addr="10e2c5f69a4d90d6d5a1009a0b69d5a3", 0x4}, @in6={0xa, 0x4e24, 0x81, @rand_addr="2db4128c8cdc86c27d4fce141c78dfbe", 0x76}]}, &(0x7f00000002c0)=0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="08000000f1ffffff0220000004fb00"/24], 0x18}}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r6, &(0x7f00000017c0), 0x199, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, r8, 0xa01, 0x0, 0x0, {0x12}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a8, r8, 0x109, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x500000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x92fd}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @ipv4={[], [], @remote}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8001, @local, 0xa0}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7b62}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3d0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7a}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c5d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x106e54d540f31df9}, 0x4000084)

08:34:43 executing program 0:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100030001000104231cc88c", 0x1e)

[  770.705299][T19218] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  770.759132][T19218] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:43 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)={0x9, 0x41, "b9057e307c6f47e1ac435771534f735849b5508ffcebf73ec3f80a7f19d567716c94fa69c5caf34468a14dd0c7ffb6e1f15e944d04aca4921f4f912e5e40b3516f"})
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r3, &(0x7f00000017c0), 0x199, 0x0)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080))

[  770.978658][T19197] IPVS: ftp: loaded support on port[0] = 21
[  771.113195][    C0] net_ratelimit: 22 callbacks suppressed
[  771.113203][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  771.124706][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  771.130543][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  771.136373][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:44 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)

08:34:44 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2", 0x11)

08:34:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000106231cc88c37", 0x1f)

08:34:44 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)

08:34:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:44 executing program 4:
r0 = socket$inet(0x10, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r1, &(0x7f00000017c0), 0x199, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x2, 0x6, 0x1003, 0x2, 0xe, 0x0, 0xfb91622bda5524e8, 0x4}})

[  771.654082][T19362] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  771.662212][T19362] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:44 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c0", 0x12)

08:34:44 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000107231cc88c37", 0x1f)

08:34:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1af5ffef3100190100040000000000000200000004000000"], 0x18}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
prctl$PR_MCE_KILL(0x21, 0x5c28f22cdb5f1c88, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa5914c0de06cd9f8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c0120000051d74", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25150000000c00020008000100400000000c00070008000100be0300005400040014000700080004000000000008000100180000003c000700080004006d4400000800040003000000080004000800000008000400050000000800030000000000080001001600000008000100070000004000020008000100010000000400040008000100a580e60c08000100e00000000800010025b300000800010000000000080001000500000008000200a7050000"], 0xc0}}, 0x20c0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r3=>0x0})
syz_open_procfs(r3, &(0x7f00000002c0)='net/packet\x00')
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010019}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="98000000a8fbc06b1b29e54bcd827618bf5c88940c402b3e2f00000000000006013d32db6921bc8d1c005cc3cf4b7ed2603b29a1000000008e9dfe2084295ac97ed6467100552cf9ea57732d075aee552ae196d2e4de5fc89eae4214b2facb675b27333baa1be21d856746420eb4", @ANYRES16=r2, @ANYBLOB="000129bd7000fddbdf250f00000044000300080001008301af8d140006000000000000000000000000000000000014000600ff010000000000000000000000000001080004007f00000008000800810000000c00020008000300000000002c00020008000d000100000008000e004e220000080002004e200000080005000900000008000e004e2200000800060006000000"], 0x98}, 0x1, 0x0, 0x0, 0x884}, 0x40840c4)

[  772.073169][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  772.079039][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  772.151044][T19493] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  772.233219][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  772.239032][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  772.254450][T19385] IPVS: ftp: loaded support on port[0] = 21
08:34:44 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c0", 0x12)

[  772.353181][T19493] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  772.367134][T19482] IPVS: ftp: loaded support on port[0] = 21
08:34:45 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x7a000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r4, &(0x7f00000017c0), 0x199, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000240)={@mcast2, <r5=>0x0}, &(0x7f0000000280)=0x14)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r7], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r6, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r8, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r11 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r11], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r10, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r12=>r10})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}}}, &(0x7f0000000740)=0xe8)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004040)={&(0x7f0000003c00)=@ll={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
r15 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x1f, 0x2000000000000146, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r15], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x20680, 0x0, [], r14, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000040c0)={0x0, 0x0, 0x8, 0x10001}, 0x10}, 0x70)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x154, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x12c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x4}}]}, 0x154}}, 0x10)
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
setsockopt$inet6_dccp_buf(r0, 0x21, 0x919237a70f3d5c01, &(0x7f0000000000)="4169d89fb07134f5faed6ceeb034355a96c09d1b03365ff2cf10", 0x1a)
r16 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x6, 0x1e1200)
setsockopt$inet6_MRT6_DEL_MFC(r16, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e21, 0x8, @mcast2, 0x3}, {0xa, 0x4e24, 0x8e7, @mcast1, 0x7}, 0x40, [0x1, 0xfffffff8, 0xd58e, 0x8000, 0x10000, 0x80, 0xf2, 0x7]}, 0x5c)
r17 = socket$inet(0x10, 0x6, 0x0)
sendmsg(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r17, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)

[  772.473181][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  772.480160][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:45 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000109231cc88c37", 0x1f)

[  772.772258][T19532] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  772.917546][T19617] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  772.952723][T19588] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  773.063246][T19617] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  776.233162][    C0] net_ratelimit: 18 callbacks suppressed
[  776.233171][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  776.244669][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  776.393160][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  776.398992][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  776.633201][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  776.639035][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  777.033254][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  777.039109][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  777.353228][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  777.359081][    C0] protocol 88fb is buggy, dev hsr_slave_1
08:34:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x32, 0x119, 0xfffffffe, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0)

08:34:50 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fafbb1a91057fca2c0", 0x12)

08:34:50 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x47, 0x0}}], 0x9a, 0x0, 0x0)

08:34:50 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000112231cc88c37", 0x1f)

08:34:50 executing program 0:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0))

08:34:50 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)

08:34:50 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c80000003200190100000000000000000200000071a4f68cda122498b5f2a9323176ae84294e5ff7ded1f0025de5ace3cde97700000000008002092756af7ef62fa54203000000118de57793ed09c68e99e1719a6bf696414770b28b532519124cf7f1ec4f93c973dc6819d75aa296cdf19426899b554fe0a58004f2a888d6e0079dc22023e002344e82d15be61d1c09260e361b12c0e35af0102bb0521f2754849809389c6332aebdc98cbb138e49c704b9409bdda193b7b30ddacb827a4e7d69b6171856db94c300"/238], 0xc8}}, 0x0)

[  777.565598][T19641] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  777.590354][T19641] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:50 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(cast6)))\x00'}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a631e8d2b24f7faa8fa", 0xa)

08:34:50 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f305010008000100015a231cc88c37", 0x1f)

[  777.818827][T19643] IPVS: ftp: loaded support on port[0] = 21
[  777.845430][T19645] IPVS: ftp: loaded support on port[0] = 21
08:34:50 executing program 5:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48)
listen(r3, 0x0)
unshare(0x40000000)
r4 = accept(r3, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c46000008000800000000000000030003000600000000000000000000004e00000000000000ef0c38000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/250], 0xfa)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xf420, 0x30, 0x4, 0x1}, &(0x7f00000000c0)=0x18)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0))
preadv(r6, &(0x7f00000001c0), 0x0, 0x0)

[  778.174152][T19783] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  778.285999][T19783] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
08:34:51 executing program 1:
r0 = socket(0x10, 0x2, 0xc)
write(r0, &(0x7f0000000040)="1f0000000206ff00fd4354c007110000f3050100080001000163231cc88c37", 0x1f)

08:34:51 executing program 4:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xa8020, 0x0)
bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x1, 0x1, 0x4, 0x1f, 0x3d, "9b384a82846bb7ff8c9bbe85acecd8ef008b711db3e565d6a8d5e0881b9e9817099e1091b1898162643d60a431f822737cb4e556ede0845529f64c5351e80e", 0x20}, 0x60)

[  778.692768][T19637] ==================================================================
[  778.701225][T19637] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200
[  778.709649][T19637] Read of size 4 at addr ffff8880a97e4080 by task syz-executor.0/19637
[  778.717881][T19637] 
[  778.720218][T19637] CPU: 0 PID: 19637 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0
[  778.728102][T19637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  778.738270][T19637] Call Trace:
[  778.741566][T19637]  dump_stack+0x172/0x1f0
[  778.745900][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  778.751972][T19637]  print_address_description.constprop.0.cold+0xd4/0x30b
[  778.758996][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  778.765065][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  778.771134][T19637]  __kasan_report.cold+0x1b/0x41
[  778.776079][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  778.782148][T19637]  kasan_report+0x12/0x20
[  778.786480][T19637]  check_memory_region+0x134/0x1a0
[  778.791592][T19637]  __kasan_check_read+0x11/0x20
[  778.796446][T19637]  refcount_inc_not_zero_checked+0x81/0x200
[  778.802357][T19637]  ? refcount_dec_and_mutex_lock+0x90/0x90
[  778.808165][T19637]  ? __kasan_check_write+0x14/0x20
[  778.813281][T19637]  refcount_inc_checked+0x17/0x70
[  778.818307][T19637]  nr_release+0x62/0x3e0
[  778.822559][T19637]  __sock_release+0xce/0x280
[  778.827158][T19637]  sock_close+0x1e/0x30
[  778.831317][T19637]  __fput+0x2ff/0x890
[  778.835311][T19637]  ? __sock_release+0x280/0x280
[  778.840164][T19637]  ____fput+0x16/0x20
[  778.844146][T19637]  task_work_run+0x145/0x1c0
[  778.844380][T19787] IPVS: ftp: loaded support on port[0] = 21
[  778.848751][T19637]  exit_to_usermode_loop+0x316/0x380
[  778.848791][T19637]  do_syscall_64+0x65f/0x760
[  778.864518][T19637]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  778.870409][T19637] RIP: 0033:0x413ae1
[  778.874307][T19637] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  778.893911][T19637] RSP: 002b:00007ffef4b007a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  778.902323][T19637] RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000413ae1
[  778.910297][T19637] RDX: 0000000000000000 RSI: ffffffff874e3863 RDI: 0000000000000009
[  778.918270][T19637] RBP: 0000000000000001 R08: ffffffff8134aaca R09: 0000000000fc8381
[  778.926240][T19637] R10: 00007ffef4b00880 R11: 0000000000000293 R12: 000000000075c9a0
[  778.934210][T19637] R13: 000000000075c9a0 R14: 0000000000762238 R15: 000000000075c124
[  778.942198][T19637]  ? __phys_addr+0x1a/0x120
[  778.946706][T19637]  ? ldsem_down_write+0x13/0x40
[  778.951550][T19637] 
[  778.953874][T19637] Allocated by task 19654:
[  778.958293][T19637]  save_stack+0x23/0x90
[  778.962460][T19637]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[  778.968088][T19637]  kasan_kmalloc+0x9/0x10
[  778.972413][T19637]  __kmalloc+0x163/0x770
[  778.976653][T19637]  sk_prot_alloc+0x23a/0x310
[  778.981239][T19637]  sk_alloc+0x39/0xf70
[  778.984093][T19806] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  778.985304][T19637]  nr_create+0xb9/0x5e0
[  778.985318][T19637]  __sock_create+0x3d8/0x730
[  778.985335][T19637]  __sys_socket+0x103/0x220
[  779.006585][T19637]  __x64_sys_socket+0x73/0xb0
[  779.011261][T19637]  do_syscall_64+0xfa/0x760
[  779.015794][T19637]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  779.021673][T19637] 
[  779.023998][T19637] Freed by task 19637:
[  779.028063][T19637]  save_stack+0x23/0x90
[  779.029255][T19806] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'.
[  779.032211][T19637]  __kasan_slab_free+0x102/0x150
[  779.032224][T19637]  kasan_slab_free+0xe/0x10
[  779.032235][T19637]  kfree+0x10a/0x2c0
[  779.032248][T19637]  __sk_destruct+0x4aa/0x680
[  779.032259][T19637]  sk_destruct+0xd5/0x110
[  779.032270][T19637]  __sk_free+0xfb/0x360
[  779.032281][T19637]  sk_free+0x42/0x50
[  779.032292][T19637]  nr_release+0x356/0x3e0
[  779.032310][T19637]  __sock_release+0xce/0x280
[  779.080551][T19637]  sock_close+0x1e/0x30
[  779.084741][T19637]  __fput+0x2ff/0x890
[  779.088728][T19637]  ____fput+0x16/0x20
[  779.092709][T19637]  task_work_run+0x145/0x1c0
[  779.097299][T19637]  exit_to_usermode_loop+0x316/0x380
[  779.102583][T19637]  do_syscall_64+0x65f/0x760
[  779.107172][T19637]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  779.113053][T19637] 
[  779.115383][T19637] The buggy address belongs to the object at ffff8880a97e4000
[  779.115383][T19637]  which belongs to the cache kmalloc-2k of size 2048
[  779.129436][T19637] The buggy address is located 128 bytes inside of
[  779.129436][T19637]  2048-byte region [ffff8880a97e4000, ffff8880a97e4800)
[  779.142792][T19637] The buggy address belongs to the page:
[  779.148489][T19637] page:ffffea0002a5f900 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0
[  779.157674][T19637] flags: 0x1fffc0000000200(slab)
[  779.162618][T19637] raw: 01fffc0000000200 ffffea0001529548 ffffea0002977ac8 ffff8880aa400e00
[  779.171205][T19637] raw: 0000000000000000 ffff8880a97e4000 0000000100000001 0000000000000000
[  779.179786][T19637] page dumped because: kasan: bad access detected
[  779.186190][T19637] 
[  779.188510][T19637] Memory state around the buggy address:
[  779.194139][T19637]  ffff8880a97e3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  779.202204][T19637]  ffff8880a97e4000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  779.210264][T19637] >ffff8880a97e4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  779.218315][T19637]                    ^
[  779.222384][T19637]  ffff8880a97e4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  779.230529][T19637]  ffff8880a97e4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  779.238581][T19637] ==================================================================
[  779.246635][T19637] Disabling lock debugging due to kernel taint
[  779.593169][T19637] Kernel panic - not syncing: panic_on_warn set ...
[  779.599808][T19637] CPU: 1 PID: 19637 Comm: syz-executor.0 Tainted: G    B             5.4.0-rc5+ #0
[  779.609095][T19637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  779.619142][T19637] Call Trace:
[  779.622437][T19637]  dump_stack+0x172/0x1f0
[  779.626772][T19637]  panic+0x2e3/0x75c
[  779.630664][T19637]  ? add_taint.cold+0x16/0x16
[  779.635340][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  779.641406][T19637]  ? preempt_schedule+0x4b/0x60
[  779.646260][T19637]  ? ___preempt_schedule+0x16/0x20
[  779.651371][T19637]  ? trace_hardirqs_on+0x5e/0x240
[  779.656395][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  779.662456][T19637]  end_report+0x47/0x4f
[  779.666611][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  779.672676][T19637]  __kasan_report.cold+0xe/0x41
[  779.677532][T19637]  ? refcount_inc_not_zero_checked+0x81/0x200
[  779.683600][T19637]  kasan_report+0x12/0x20
[  779.687928][T19637]  check_memory_region+0x134/0x1a0
[  779.693033][T19637]  __kasan_check_read+0x11/0x20
[  779.697880][T19637]  refcount_inc_not_zero_checked+0x81/0x200
[  779.703789][T19637]  ? refcount_dec_and_mutex_lock+0x90/0x90
[  779.709594][T19637]  ? __kasan_check_write+0x14/0x20
[  779.714706][T19637]  refcount_inc_checked+0x17/0x70
[  779.719728][T19637]  nr_release+0x62/0x3e0
[  779.723974][T19637]  __sock_release+0xce/0x280
[  779.728563][T19637]  sock_close+0x1e/0x30
[  779.732714][T19637]  __fput+0x2ff/0x890
[  779.736697][T19637]  ? __sock_release+0x280/0x280
[  779.741550][T19637]  ____fput+0x16/0x20
[  779.745532][T19637]  task_work_run+0x145/0x1c0
[  779.750134][T19637]  exit_to_usermode_loop+0x316/0x380
[  779.755427][T19637]  do_syscall_64+0x65f/0x760
[  779.760017][T19637]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  779.765903][T19637] RIP: 0033:0x413ae1
[  779.769796][T19637] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  779.789394][T19637] RSP: 002b:00007ffef4b007a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  779.797802][T19637] RAX: 0000000000000000 RBX: 000000000000000a RCX: 0000000000413ae1
[  779.805801][T19637] RDX: 0000000000000000 RSI: ffffffff874e3863 RDI: 0000000000000009
[  779.813767][T19637] RBP: 0000000000000001 R08: ffffffff8134aaca R09: 0000000000fc8381
[  779.821734][T19637] R10: 00007ffef4b00880 R11: 0000000000000293 R12: 000000000075c9a0
[  779.829706][T19637] R13: 000000000075c9a0 R14: 0000000000762238 R15: 000000000075c124
[  779.837691][T19637]  ? __phys_addr+0x1a/0x120
[  779.842192][T19637]  ? ldsem_down_write+0x13/0x40
[  779.847951][T19637] Kernel Offset: disabled
[  779.852276][T19637] Rebooting in 86400 seconds..