MSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1a4, 0x5, 0x0, 0x1, [{0x1a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}]}]}, 0xec4}}, 0x0)

[  477.761075][T13605] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:36 executing program 5:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010400000000000000001200000018"], 0x2c}}, 0x0)
sendfile(r3, r2, 0x0, 0xffffffff)
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)

07:25:36 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})

07:25:36 executing program 1:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000040)={[0x3ff]}, 0x8)

07:25:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0d000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:37 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0)

07:25:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x60d}, 0x14}}, 0x0)

[  478.587989][T13620] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:37 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8904, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', <r4=>r1, 0x2f, 0x94, 0x20, 0x1, 0x49, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x8, 0xf54f}})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000180)={@loopback, 0x0, r7})
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000580)={0x0, @qipcrtr={0x2a, 0xffffffff00000003, 0x7fff}, @rc={0x1f, @none, 0x3}, @xdp={0x2c, 0x5, <r8=>0x0, 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)='veth0_vlan\x00', 0xffffffff80000000, 0x5, 0x1})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', <r9=>r1, 0x4, 0x3f, 0x40, 0x7, 0x2, @loopback, @private1, 0x8, 0x8000, 0x2, 0x7}})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000140)={'team0\x00', <r12=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000000180)={@loopback, 0x0, r12})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl1\x00', <r13=>r1, 0x1, 0x1, 0x7, 0x2b, {{0x17, 0x4, 0x2, 0xc, 0x5c, 0x68, 0x0, 0x2, 0x4, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x83, 0x3, 0x5, [{@rand_addr=0x64010101, 0xfff}, {@multicast2, 0x7}]}, @noop, @timestamp={0x44, 0x14, 0x2f, 0x0, 0x9, [0xffffffff, 0x10000, 0x1, 0x3]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xd9, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @loopback]}]}}}}})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000840)={0x368, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x40, 0x81, 0xc}, {0x1, 0x8, 0x1, 0x81}, {0x5, 0x14, 0x1, 0x2d}, {0x7ff, 0xff, 0x6, 0xbec}, {0x1e8, 0x0, 0x85, 0x400}, {0x2, 0x6, 0x8, 0x5}, {0xff, 0xff, 0x9, 0x10}, {0xb1f7, 0x2, 0x9, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe24a4af}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x41, 0x3, 0x400}]}}}]}}, {{0x8, 0x1, r13}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x98, 0x7, 0x9}, {0x1, 0x8, 0x4, 0x3}, {0x1f, 0x1f, 0x0, 0xd7d}, {0x4, 0x7f, 0x8, 0x8}, {0x0, 0x2, 0x81, 0xff}]}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x40}, 0x20048010)

07:25:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x40}}, 0x0)

[  478.665454][T13623] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:38 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:25:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0e000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  479.098914][T13632] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
[  479.194286][T13634] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
07:25:38 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0), 0x4)

07:25:38 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8901, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x44}}}}, ["", "", "", "", ""]}, 0x20}}, 0x1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r2=>0x0})
r3 = socket(0x0, 0x0, 0x29)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x188, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x79, 0x5b, "faa9c282894908df5176c1390fbf16c59e4da4fd703f17eccb30fb1d5e183bc2ffb041781571aee1ad769bc094bb33ebb729c86555ef3c9eb85963646aa6e285c90ecf39a26c1718f0495306ca640c14c65fbf41bc4a543ebf3b6c933ba2b2de5e454888eda1dc6063ea345b78c595ecd3dffbea75"}, @NL80211_ATTR_FRAME_MATCH={0xaa, 0x5b, "3f6c020d968f28ade5835e5ba28c9a45912755e7cc12ec503711f5c759b2e9eddf8958b66bf645ece35fc5eb788cfa91bb3f5412caf69e66c1f608ddbb54085f3dc628012146ad47f1fc4b59adb51962f7f1079e7268dbfa3dd3f6774b5f526f7a1dbef920f81f12807a648884e5fd9579219a6606532d1f6631654af03d4e129fa65ec4166532edcc125653a76591c3c18af011dff16ce16ce99669ee848aa220c2104f2967"}, @NL80211_ATTR_FRAME_MATCH={0x3c, 0x5b, "e51b69e9f067f414bf1ba4c5c1427dfe919fdf0a01077a15e4eb57b740a9774747e67fe69566d3427e1e4ab80434734aa8339fa250498038"}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)={'team0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000180)={@loopback, 0x0, r7})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000018c0)={'ip6tnl0\x00', &(0x7f0000001840)={'sit0\x00', <r8=>r2, 0x29, 0x6, 0x0, 0x2950, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x20, 0x80, 0x1739a430, 0x9}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x174, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe877c310207ae362}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x240408d1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000020801080000000000000000070000070e00010073797a31d823e295736d8282c8479900000000050003003a00000005000300010000000500030088000180"], 0x38}}, 0x80)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x35}, 0x4, 0xe, 0x0, 0x100, 0xffffffffffff7fff, 0x21, r2})

07:25:38 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, "9207df"}, 0x4)

[  479.479115][T13640] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  479.538659][T13641] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:38 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', 0x0})

07:25:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0xfcffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0f000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x28, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x50}}, 0x0)

07:25:39 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f00000032c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @ra={0x94, 0x4}]}}}], 0x18}}, {{&(0x7f0000000380)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}], 0x18}}, {{&(0x7f0000001640)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001ac0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @rr={0x7, 0x3}]}}}], 0x18}}], 0x3, 0x0)

07:25:39 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0)

[  480.257421][T13659] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:39 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xf1, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback=0xac1414aa, @local, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@private}, {@private}, {@empty}]}, @cipso={0x86, 0x1f, 0x0, [{0x0, 0x2}, {0x0, 0x11, "3cccab0ef9c127d09e876caec97154"}, {0x0, 0x6, "b1d90551"}]}]}}}}}}}, 0x0)

[  480.336649][T13661] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0xffff8e88, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e10000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f000000e1c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

07:25:39 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000007c0)={@remote, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0xfff})

07:25:39 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xf)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)

07:25:39 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0)

07:25:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:40 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e11000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:40 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_LABELS={0x4}]}, 0x18}}, 0x0)

07:25:40 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68)

07:25:40 executing program 2:
socketpair(0xa, 0x6, 0x0, &(0x7f00000001c0))

07:25:40 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000001180)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000010c0)=[@hoplimit_2292={{0x14}}], 0x18}, 0x0)

07:25:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:40 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f00000032c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000001640)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001ac0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @rr={0x7, 0x3, 0x84}, @timestamp={0x44, 0x4, 0x42, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0x0)

07:25:40 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0)

07:25:40 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e12000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:41 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x2000, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c)

07:25:41 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "c1"}]}}, &(0x7f0000000180)=""/194, 0x2a, 0xc2, 0x1}, 0x20)

07:25:41 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e1, &(0x7f0000000480))

07:25:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:41 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0)

07:25:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e25000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:41 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x40086602, &(0x7f000000a3c0)={'ip_vti0\x00', 0x0})

07:25:41 executing program 4:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r2})

[  483.005771][T13719] validate_nla: 6 callbacks suppressed
[  483.005841][T13719] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:42 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f000000a3c0)={'ip_vti0\x00', 0x0})

[  483.183448][T13721] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:42 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)

07:25:42 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:42 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:42 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e48000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:42 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x304}, "b10b5e6dcb15ebf1", "ddb70011c800", '\x00', "f605971e82961197"}, 0x28)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r2, r0)

[  483.857539][T13736] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:42 executing program 2:
mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x73}, 0x20)

[  483.927377][T13739] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:43 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e4c000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:43 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:43 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6cb", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xffc}}, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/192, 0xc0}], 0x1}, 0x0)

[  484.520129][T13756] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  484.581583][T13757] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:43 executing program 1:
add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)

07:25:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:43 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e60000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:44 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfd, @multicast, 'geneve0\x00'}}, 0x1e)
accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)

07:25:44 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  485.405950][T13781] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:44 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0x0, 0x7, '\x00', 0x0})

07:25:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  485.506855][T13785] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:44 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
read$snddsp(r0, &(0x7f0000000080)=""/5, 0x5)

07:25:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e68000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:45 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:45 executing program 1:
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x2)

[  486.333375][ T8877] Bluetooth: hci5: command 0x0406 tx timeout
[  486.392567][T13801] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  486.471390][T13802] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:45 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002a00)='/proc/key-users\x00', 0x0, 0x0)
pidfd_send_signal(r0, 0x0, 0x0, 0x0)

07:25:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:25:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e6c000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ec0)=""/4096, 0x24}], 0x1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0)

07:25:46 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:46 executing program 2:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0xa})

07:25:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:25:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e74000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:46 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:46 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0)

07:25:47 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:47 executing program 1:
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = getpid()
syz_open_procfs$userns(r0, &(0x7f0000000240))

07:25:47 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x123080, 0x0)
read$snapshot(r0, 0x0, 0x0)

[  488.593598][T13837] validate_nla: 2 callbacks suppressed
[  488.593670][T13837] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  488.665586][T13840] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:25:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e7a000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:48 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:48 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={0x0, 0x4601, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

07:25:48 executing program 2:
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))

[  489.449599][T13874] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  489.542033][T13875] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:25:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:48 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00030010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:48 executing program 1:
syz_emit_ethernet(0x26, &(0x7f0000000040)={@random="3bcbd594db35", @link_local, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffc, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}, 0x0)

07:25:49 executing program 2:
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)

07:25:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

07:25:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  490.204880][T13891] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  490.271953][T13892] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:49 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:49 executing program 1:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x34c81, 0x0)

07:25:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00050010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:49 executing program 2:
fanotify_mark(0xffffffffffffffff, 0x79, 0x8000000, 0xffffffffffffffff, 0x0)

07:25:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[  490.927892][T13906] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  491.001132][T13909] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:50 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:50 executing program 1:
mknodat$null(0xffffffffffffff9c, &(0x7f0000002d80)='./file0/file0\x00', 0x0, 0x103)

07:25:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00060010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:50 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f0000002340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "32639e", 0x14, 0x6, 0x0, @dev, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

07:25:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[  491.735428][T13924] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  491.813182][T13925] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:50 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:50 executing program 1:
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x6942, 0x0)

07:25:50 executing program 2:
r0 = socket(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x20000004)

07:25:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00070010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:25:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:51 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:51 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000000080)="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", 0x2000, &(0x7f0000006980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:25:51 executing program 1:
pipe2$9p(&(0x7f0000000e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000e40)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
write$P9_RMKNOD(r0, &(0x7f0000001200)={0x14}, 0x14)

07:25:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0a070010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:25:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getqdisc={0x24, 0x26, 0xa7e8468726f5c5c7}, 0x24}}, 0x0)

07:25:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:52 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0)

07:25:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0a080010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:25:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  493.711617][T13969] validate_nla: 4 callbacks suppressed
[  493.711687][T13969] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:52 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000002600)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20}, 0x0)

[  493.823999][T13970] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:52 executing program 1:
clone(0x4080, &(0x7f0000000100), 0x0, 0x0, 0x0)

07:25:53 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00090010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:53 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:25:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:53 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000001c0))

[  494.549072][T13986] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  494.620728][T13989] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:53 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:53 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "4209f8", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x1b}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0)

07:25:54 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:25:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0a090010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:54 executing program 2:
syz_emit_ethernet(0xe, &(0x7f0000000080)={@multicast, @local, @void, {@generic={0x86dd}}}, 0x0)

[  495.369335][T14004] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0)

[  495.427176][T14005] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:54 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:25:54 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:54 executing program 2:
socketpair(0x2, 0x0, 0xa689, 0x0)

07:25:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:55 executing program 1:
syz_emit_ethernet(0xfc0, &(0x7f00000014c0)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "4df9c0", 0xf86, 0x2f, 0x0, @private0, @empty, {[@fragment, @srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@mcast1, @remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, @hopopts={0x0, 0x1b3, '\x00', [@ra, @jumbo, @generic={0x0, 0xd8d, "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"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd, 0x0, [], "5e8dff72c906101de66d9c72ae"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "868320fa91f1e8fe99"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "f2633354b0944d1043e5a20454f0f52d9927b99a4f4134c95f0a3d4a1e1457273bc9d93cae74e59fcb250b4949680285ddd0a36188ce583ef75c58c210a043a0268193e32dcdb7cc783e75e71f9127552841a187f0802c9557b334da455179c6750381e477690dfd931279e2b611a83b68828f025ef25d34c167edd2aa89d489c55e0acb03ac0983710342b795c62947a2e9796ac318aabb2e3c"}, {}, {}, {0x8, 0x6558, 0x0, "28e4f11ddd4af5baf4b531eeb3f783194e5a3fd8be9c5e3ee3dbb5c80d26cd98cf416c04c1c0bafa22bb70c653ae11e661edbb7827ee2cab83bdf5efa4928791a54c961a7eae32400f3bc86b15aede67a8b6bbbdd0fe7e41025ac268d5574744c7683d8fbe126a4586d8"}}}}}}}, 0x0)

07:25:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  496.144075][T14020] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  496.203883][T14022] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:55 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e070a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:55 executing program 2:
io_setup(0x7, &(0x7f0000000200)=<r0=>0x0)
io_setup(0xff, &(0x7f0000000100)=<r1=>0x0)
io_setup(0x963, &(0x7f0000000000))
io_destroy(r1)
io_destroy(r0)

07:25:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x68}}, 0x0)

07:25:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  496.908861][T14039] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:55 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  496.956998][T14042] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  497.165749][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
07:25:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  497.318347][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
07:25:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e080a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:56 executing program 2:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="3bcbd594db35", @link_local, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast1, @loopback}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b3ca7b", 0x0, "8e3bae"}}}}}}, 0x0)

07:25:56 executing program 1:
socketpair(0x26, 0x5, 0xa73, &(0x7f0000000180))

07:25:56 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:25:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e090a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:57 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

07:25:57 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x56)

07:25:57 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:25:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0a0a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:57 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/asound/seq/timer\x00', 0x0, 0x0)

07:25:57 executing program 1:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
setreuid(0x0, 0xee00)
linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)

07:25:58 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  499.064669][T14093] validate_nla: 4 callbacks suppressed
[  499.064749][T14093] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  499.177941][T14096] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:58 executing program 2:
sched_setparam(0x0, &(0x7f00000004c0))

07:25:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:25:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000b0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:58 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000d80)=[@cred={{0x1c}}], 0x20}, 0x0)

07:25:58 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  500.026341][T14115] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

[  500.089673][T14116] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:59 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:59 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800009, 0x11, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\x9d#\x00\x00\x00\xa7?3\xef\xc6\xd1\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17\x94$^\xe1Ob\xe1', 0x0)
pwritev(r1, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0)
lseek(r1, 0x0, 0x3)

07:25:59 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000009e80)={&(0x7f0000009cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}}, &(0x7f0000009d80)=""/248, 0x26, 0xf8, 0x1}, 0x20)

07:25:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000c0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:25:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  500.717362][T14131] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  500.784278][T14132] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:25:59 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:25:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

07:25:59 executing program 1:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x5}, &(0x7f0000000140), 0x0)

07:26:00 executing program 2:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32])

07:26:00 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000d0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:00 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:00 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

07:26:00 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
write(r0, 0x0, 0x0)

[  501.562663][T14146] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:00 executing program 2:
sigaltstack(&(0x7f0000ffd000/0x2000)=nil, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

[  501.625169][T14147] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:00 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000e0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:26:01 executing program 2:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x40}, {r0, 0x4}], 0x2, 0xffffffff)
close(r1)

07:26:01 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xe775)

07:26:01 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  502.341101][T14162] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  502.399389][T14166] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:26:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:01 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000f0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:01 executing program 2:
memfd_create(&(0x7f0000000300)='$,6:/\x00', 0x4)

07:26:01 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0x0, 0x1602}, 0x40)

07:26:01 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:26:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x25}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:02 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00110010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:02 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs, 0x6e)

07:26:02 executing program 1:
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14)

07:26:02 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)

07:26:03 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00120010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x1}, 0x24}}, 0x0)

07:26:03 executing program 1:
socket(0x1, 0x0, 0x6399)

07:26:03 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  504.632027][T14211] validate_nla: 4 callbacks suppressed
[  504.632092][T14211] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  504.765398][T14213] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:03 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)

07:26:04 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00200010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x27}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:04 executing program 2:
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)

07:26:04 executing program 1:
r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, 0x0, 0x0)

07:26:04 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)

[  505.677466][T14231] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  505.747301][T14233] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:04 executing program 2:
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000100)=@profile={'permprofile ', ']+.[&:%\x00'}, 0x14)

07:26:05 executing program 1:
r0 = openat$procfs(0xffffff9c, &(0x7f0000000e40)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$alg(r0, &(0x7f00000000c0)=""/181, 0xb5)

07:26:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00250010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  506.270231][   T35] audit: type=1400 audit(1624001165.254:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="]+.[&:%" pid=14240 comm="syz-executor.2"
07:26:05 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

07:26:05 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  506.573280][T14247] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:05 executing program 2:
ioperm(0x0, 0x0, 0x0)

[  506.644867][T14249] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc}]}, 0xfffffffffffffd13}}, 0x0)

07:26:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e88470010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

07:26:06 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:06 executing program 2:
modify_ldt$write2(0x11, &(0x7f0000000100), 0x10)

07:26:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  507.560200][T14265] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  507.633540][T14266] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

07:26:06 executing program 1:
r0 = openat$procfs(0xffffff9c, &(0x7f0000000e40)='/proc/vmallocinfo\x00', 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0))

07:26:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00480010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:07 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:07 executing program 2:
perf_event_open(&(0x7f0000000cc0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:26:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x2e}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  508.334761][T14281] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)

[  508.453120][T14283] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:07 executing program 1:
r0 = openat$procfs(0xffffff9c, &(0x7f0000000e40)='/proc/vmallocinfo\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x10, r0, 0x0)

07:26:07 executing program 4:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:07 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e88480010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:07 executing program 2:
r0 = openat$bsg(0xffffff9c, &(0x7f0000002500), 0x0, 0x0)
inotify_add_watch(r0, 0x0, 0x205)

07:26:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x30}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)

07:26:08 executing program 1:
openat$procfs(0xffffff9c, &(0x7f00000005c0)='/proc/slabinfo\x00', 0x0, 0x0)

07:26:08 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:08 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e004c0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:08 executing program 2:
r0 = openat$procfs(0xffffff9c, &(0x7f0000000e40)='/proc/vmallocinfo\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)

07:26:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x31}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)

[  509.849596][ T3129] ieee802154 phy0 wpan0: encryption failed: -22
[  509.856597][ T3129] ieee802154 phy1 wpan1: encryption failed: -22
[  509.858968][T14312] validate_nla: 2 callbacks suppressed
[  509.859041][T14312] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:09 executing program 1:
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)

[  510.033265][T14313] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:09 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:09 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e65580010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:09 executing program 2:
r0 = openat$procfs(0xffffff9c, &(0x7f0000000e40)='/proc/vmallocinfo\x00', 0x0, 0x0)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x10, r0, 0x0)

07:26:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:26:09 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

[  510.831253][T14331] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:09 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  510.900491][T14334] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x34}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:26:10 executing program 2:
openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0)

07:26:10 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00600010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:10 executing program 1:
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000040))
mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

07:26:10 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  511.628582][T14347] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x35}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  511.688048][T14350] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

07:26:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e58650010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:11 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000380))

07:26:11 executing program 1:
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

07:26:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:11 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  512.326871][T14363] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  512.410804][T14366] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:26:11 executing program 2:
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

07:26:11 executing program 1:
r0 = getpid()
process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/254, 0xfe}], 0x1, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/111, 0x6f}], 0x1, 0x0)

07:26:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00680010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:12 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  513.128880][T14382] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

[  513.248011][T14384] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:12 executing program 1:
r0 = openat$bsg(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06055c8, 0x0)

07:26:12 executing program 2:
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)

07:26:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e006c0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

07:26:12 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(0x0, r0)

07:26:13 executing program 2:
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff)

07:26:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00740010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

07:26:13 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:13 executing program 1:
openat$zero(0xffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)

07:26:13 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x10)

07:26:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3a}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e007a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

07:26:14 executing program 1:
openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0)

07:26:14 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  515.416027][T14432] validate_nla: 4 callbacks suppressed
[  515.416096][T14432] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

[  515.518728][T14433] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00810010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x18}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

07:26:15 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

07:26:15 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  516.300861][T14447] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:15 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000600)={0x10, 0x2}, 0x10)

[  516.379601][T14451] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e47880010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:15 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x20)

07:26:15 executing program 1:
fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x0)

07:26:16 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000000), 0x4)

07:26:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  516.998040][T14462] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:16 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  517.053701][T14464] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e48880010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:16 executing program 5:
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000001580), 0xa, &(0x7f00000001c0)=""/4096, 0x1000}, 0x0)

07:26:16 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000a40)={&(0x7f0000000280)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x1400}}], 0x1c}, 0x0)

07:26:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:16 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000440)="82", 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x10, 0x84, 0x9, @rand_addr=0x80000000}], 0x10}, 0x0)

[  517.746603][T14478] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  517.824581][T14480] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:16 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:17 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c)
sendto$inet6(r0, &(0x7f0000000240)="95", 0x1, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c)

07:26:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:17 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}}, 0x8)

07:26:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:17 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c)

[  518.591253][T14498] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  518.653712][T14499] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:17 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:17 executing program 1:
semget(0x1, 0x3, 0x6c2)

07:26:18 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
read(r0, &(0x7f0000000100)=""/146, 0x92)

07:26:18 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x10c)

07:26:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:18 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:18 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8}, 0xb)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0xb)

07:26:18 executing program 5:
fchmodat(0xffffffffffffffff, &(0x7f0000001dc0)='./file0\x00', 0x0)

[  520.611754][T14499] team0 (unregistering): Port device team_slave_0 removed
[  520.911295][T14499] team0 (unregistering): Port device team_slave_1 removed
[  521.063753][T14498] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:20 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000012008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000100), &(0x7f0000000140)=0x4)

07:26:20 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r1, r0)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

07:26:20 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:20 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x12, &(0x7f0000000000)={0x1}, 0x1)

[  521.627792][T14584] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:20 executing program 2:
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x7fff)

[  521.697832][T14587] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:20 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  521.807736][T14587] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:20 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@sndinfo={0x1c, 0x84, 0x4, {0x8000}}], 0x1c}, 0x0)

07:26:21 executing program 5:
unlinkat(0xffffffffffffffff, &(0x7f00000006c0)='./file1\x00', 0x0)

07:26:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000029008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:21 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:21 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000), 0x8)

[  522.480401][T14600] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x3}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  522.548763][T14600] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'.
07:26:21 executing program 1:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x180}, 0x0)

[  522.634174][T14602] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:21 executing program 5:
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}})

07:26:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e20000150008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:22 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:22 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="c1c4827ed604ef3be70f61f38f98105bbf398701d99e724bcca73d66b5529d5415a903840a89e445920372", 0x2b}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="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", 0xfc6}], 0x3}, 0x0)

07:26:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x4}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  523.314818][T14619] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:22 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000080)={@loopback, @multicast1}, 0x8)

[  523.390491][T14620] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:22 executing program 5:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000040)="6ed258b5bfeb3e94", 0x8, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c)

07:26:22 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000073008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:22 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:22 executing program 2:
getgroups(0x4000000000000031, &(0x7f0000000000))

07:26:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x5}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:23 executing program 1:
statfs(&(0x7f00000001c0)='./file0/file0\x00', 0x0)

[  524.116817][T14638] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  524.209387][T14640] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:23 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@un=@abs={0x8}, 0x8)

07:26:23 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00020010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:23 executing program 2:
getgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, <r0=>0xffffffffffffffff])
setgroups(0x4, &(0x7f0000000380)=[0x0, 0x0, r0, 0x0])

07:26:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:23 executing program 1:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000040)="6ed258b5bfeb3e94a18c2dd040dd717dcc30821b6e48deea7dab7368458a57d2", 0x20, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c)

07:26:24 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f00000000c0), 0xc)

07:26:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00030010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:24 executing program 2:
readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

07:26:24 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:24 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c)
close(r0)

07:26:24 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
dup2(r1, r0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000100), &(0x7f0000000040)=0x98)

07:26:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00040010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:25 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, 0xb)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0xb)

07:26:25 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  526.216959][T14694] validate_nla: 4 callbacks suppressed
[  526.217030][T14694] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  526.285660][T14696] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:25 executing program 1:
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}})
getresuid(&(0x7f0000000500), &(0x7f0000000540), 0x0)

07:26:25 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x5e, 0x2}, 0x10)
listen(r0, 0xe9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000080)={0xfffffffffffffd9e, 0x2}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="ef", 0x1}], 0x1, &(0x7f0000001740)=[@init={0x14}], 0x14}, 0x0)

07:26:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00050010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:25 executing program 2:
open$dir(&(0x7f0000000080)='./file0\x00', 0x50208, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)

07:26:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  527.092254][T14713] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:26 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
accept$inet(r0, 0x0, 0x0)

[  527.149395][T14715] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:26 executing program 5:
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)

07:26:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00060010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:26 executing program 2:
openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x200, 0x0)

07:26:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0xc}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:26 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0x0}}, 0x14)

[  527.862123][T14729] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  527.949638][T14734] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:27 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x5e, 0x2}, 0x10)
listen(r0, 0xe9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000080)={0xfffffffffffffd9e, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x5600}, 0x10)
sendto$inet(r1, &(0x7f0000000380)="cc", 0x1, 0x0, 0x0, 0x0)

07:26:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:27 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c)

07:26:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00070010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:27 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:27 executing program 1:
setitimer(0x0, &(0x7f0000000000)={{0x0, 0xe254}, {0x0, 0x1}}, 0x0)

[  528.769778][T14754] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:27 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
r2 = dup2(r1, r0)
sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x24, &(0x7f0000000100), &(0x7f0000000040)=0x98)

[  528.852968][T14757] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x60}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00080010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:28 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100)
shutdown(r0, 0x1)

07:26:28 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4)
bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c)
getsockname$inet6(r0, 0x0, &(0x7f0000000100))

07:26:28 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  529.537874][T14773] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  529.610546][T14777] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:28 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={0x0}, 0x10)

07:26:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x93}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00090010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:29 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="83250d26d5c4bb9c9ebe7737a2cae4456bf09907fc018a9498f7f158e042212f10", 0x21}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000400)="3ec2bc885ca0dac907123067a7ee70222196ec16691466fdfcb1cbf25a27ed629fb1f5fadbfe4e58b015280fdb1dc4a750083bd8568721dc0067c839b15d2a97eff47cee930cb52a6900fd4a0382c5f0291c375ccfc0f87474af3f803756b4caff5ebde0c7e654fa38249e138f0a0938f6f72026f471b5ec29d8f410cd7a5ece3a2b90962ff0b7f3b0afbd698028c0fbae10aa67658841f9e863ecaad43dd60dc460d30ca7b996e4f3bc9336ad0f5cf31949b1cbc0a3", 0xb6}, {&(0x7f00000004c0)="f3a7c60a31c0c622f4e7162db04a3fe63d794cf85e0f1d7a1361063dc72e19643e6f5d4885da965ad0ded08b39c506bf871bf826acbf9dd3a443fd19c26be6dfa268969895862c", 0x47}, {&(0x7f0000000540)="c99a265aa85788d4c3f9e32505cc188d7c7298299b9a13e0540e3d7a0c442c68ea101d9c882d12c03233e7df735fce11dde2ded999d3f41ff0526f1df905aab4590b74a72eb661228cb1e28d72da66", 0x4f}, {&(0x7f0000002300)="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", 0xc5c}], 0x6}, 0x0)

07:26:29 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000016180)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@generic]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xf8, &(0x7f00000002c0)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:26:29 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

07:26:29 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:29 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{0xffffffffffffffff}], 0x1}, 0x0)

07:26:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:29 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x205, 0x1, 0xb9cc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40)

07:26:30 executing program 5:
socketpair(0x28, 0x2, 0x0, &(0x7f0000000880))

07:26:30 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000b0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:30 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8912, 0x0)

07:26:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0)

07:26:30 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="1b", 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)='9', 0x1}], 0x1}, 0x4040880)

[  531.790094][T14821] validate_nla: 4 callbacks suppressed
[  531.790175][T14821] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  531.891253][T14823] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:31 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:31 executing program 2:
socketpair(0x1e, 0x80001, 0x0, &(0x7f0000000880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$kcm(r0, &(0x7f0000010140)={0x0, 0x0, &(0x7f0000010000)=[{0x0}, {&(0x7f000000ff80)=""/36, 0x24}], 0x2}, 0x22)
sendmsg$inet(r1, &(0x7f0000010340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='r', 0x1}], 0x1}, 0x0)

07:26:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x3}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000c0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:31 executing program 1:
bpf$BPF_BTF_LOAD(0x16, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

07:26:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb39, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

[  532.572281][T14841] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  532.631247][T14844] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:31 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:31 executing program 2:
r0 = semget(0x2, 0x0, 0x0)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001080)={{0x2, 0x0, 0x0, 0xffffffffffffffff, 0xee00}})

07:26:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x4}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000d0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb39, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

07:26:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb39, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

[  533.338511][T14858] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:32 executing program 2:
socket(0x1, 0x0, 0x101)

[  533.409501][T14861] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x5}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:32 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb39, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

07:26:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000e0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb39, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

07:26:32 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

07:26:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  534.257318][T14875] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:33 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  534.325163][T14878] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb39, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

07:26:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r1, 0xb39, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)

07:26:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000f0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:33 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})

07:26:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:34 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  535.009707][T14892] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  535.082545][T14894] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="390b0000000000000000050000"], 0x20}}, 0x0)

07:26:34 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2, 0x0, 0x300)

07:26:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00100010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  535.430103][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:26:34 executing program 2:
syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x0, 0x28000)

07:26:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:34 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000010c0))

07:26:34 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="390b3f0000000010000001"], 0x28}}, 0x0)

07:26:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00110010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001400), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r1, 0x3}, 0x14}}, 0x0)

[  536.298766][T14921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
07:26:35 executing program 5:
prctl$PR_SET_NAME(0x1d, 0x0)

07:26:35 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  536.410186][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
07:26:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00120010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:35 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x21, 0x0, 0x300)

07:26:35 executing program 2:
openat$vsock(0xffffffffffffff9c, 0x0, 0x430380, 0x0)

07:26:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xc}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="390b000000000000000005"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

07:26:36 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  537.159916][T14939] validate_nla: 4 callbacks suppressed
[  537.159996][T14939] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  537.250267][T14940] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x0)

[  537.420938][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  537.521510][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:26:36 executing program 2:
socket(0x29, 0x5, 0x81)

07:26:36 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00250010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="390b000000000000000005"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

07:26:36 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000002800)={0x0, 'wg1\x00', {0x2}, 0x7fff})
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x8, 0x0, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000001c0)={0x2, "a41a"}, 0x3)
socket(0x21, 0xa, 0x7)
r2 = accept4(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x80800)
r3 = socket$inet(0x2, 0x3, 0x2)
connect(r3, &(0x7f0000000b40)=@hci, 0x80)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000002840)={0x0, 'gre0\x00', {}, 0x7})
sendmsg$rds(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/98, 0x62}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/102, 0x66}, {&(0x7f0000002440)=""/230, 0xe6}, {&(0x7f0000002540)=""/241, 0xf1}], 0x8, &(0x7f0000002740)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x3}, &(0x7f00000026c0)=0x2, &(0x7f0000002700)=0x5, 0xfffffffffffeffff, 0x6, 0xf96, 0x4, 0x22, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x45}], 0x70, 0x24048800}, 0x4000)
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$rds(0x15, 0x5, 0x0)

[  538.051842][T14963] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  538.110194][T14964] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:37 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x2, 0x0)

[  538.223092][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:26:37 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x60}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00480010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="390b000000000000000005"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

07:26:37 executing program 1:
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x18d042)

[  538.876089][T14984] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:37 executing program 2:
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x200, 0x18d042)

[  538.923381][T14987] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  538.941538][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
07:26:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x93}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:38 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="390b000000000000000005"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

07:26:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e004c0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:38 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000240)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x2d}]}}}], 0x18}}], 0x1, 0x0)

07:26:38 executing program 2:
socketpair(0x0, 0x4bbc1e18d8d95212, 0x0, 0x0)

[  539.603346][T15000] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  539.633189][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  539.667959][T15002] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:38 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:39 executing program 5:
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
keyctl$read(0xb, r0, 0x0, 0x0)

07:26:39 executing program 1:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect(r0, &(0x7f0000000280)=@rc={0x1f, @none}, 0x17)

07:26:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00600010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:39 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}})

07:26:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  540.498079][T15020] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:39 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  540.572699][T15021] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:39 executing program 5:
r0 = socket(0x2, 0x3, 0x3a)
sendmsg$rds(r0, &(0x7f0000002a80)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4810)

07:26:39 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x16, 0x0, 0x0)

07:26:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00680010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:40 executing program 2:
socket$kcm(0x29, 0xf, 0x0)

07:26:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:40 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x2)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/226, &(0x7f0000000100)=0xe2)

07:26:40 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:40 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
connect(r1, &(0x7f0000000b40)=@hci, 0x80)
r2 = socket$inet(0x2, 0x3, 0x2)
connect(r2, &(0x7f0000000b40)=@hci, 0xfffffffffffffea1)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'team_slave_0\x00', {}, 0x7ff})
r3 = socket(0x5, 0x3, 0x56)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'veth1_to_batadv\x00', {}, 0x7})
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000040)={'veth0_virt_wifi\x00', {0x2, 0x0, @broadcast}})
r4 = socket$inet(0x2, 0x3, 0x2)
connect(r4, &(0x7f0000000b40)=@hci, 0x80)
ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000100)={'hsr0\x00'})
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)

[  541.641269][T15043] IPVS: length: 226 != 8
07:26:40 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e006c0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:40 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0x4148, 0x0)

07:26:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:40 executing program 5:
r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0)
write$P9_RMKDIR(r0, &(0x7f0000000440)={0x14}, 0x14)
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet6_dccp_buf(r1, 0x21, 0x0, 0x0, 0x0)

07:26:41 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:41 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc2604110, 0x0)

07:26:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00740010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:41 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10)
socketpair(0xf, 0x0, 0x80, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$sock(r1, &(0x7f0000000300)={&(0x7f0000000140)=@phonet={0x23, 0x1f, 0xff, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="a936f982cc77d0bda77832d7ebbf43ee5bb436b03bb98e37de65edb11ae8b6d243e89617db7899e8441a29abb8b63f3a5721630f2f23768f5ec0deeb915fec7063420d60d4fbc47f5c272ea09bfc0f473e00", 0x52}], 0x1, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x148}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}], 0x48}, 0x2000004)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0), 0x4)
r2 = socket(0x26, 0x4, 0x3)
setsockopt$RDS_RECVERR(r2, 0x114, 0x2, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vcan0\x00', {}, 0x3})

07:26:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x900}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:41 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
fork()
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})

[  542.692304][T15070] validate_nla: 4 callbacks suppressed
[  542.692379][T15070] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:41 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  542.800444][T15071] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:42 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/139)

07:26:42 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e007a0010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xc00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:42 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0x80184132, 0x0)

[  543.510517][T15091] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:42 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:26:42 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  543.596126][T15095] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:42 executing program 5:
r0 = socket(0x25, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000004000)={&(0x7f0000001b40)=@in={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

07:26:42 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000310008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:43 executing program 2:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
getresuid(&(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80))

07:26:43 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x24, 0x0, &(0x7f0000000040))

07:26:43 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c)
sendto(r0, &(0x7f0000000480)="a3", 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000001c0)='R', 0x1, 0x100, 0x0, 0x0)

07:26:43 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  544.393486][T15111] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  544.445409][T15114] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x6000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:43 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000000), &(0x7f0000000040)=0x4)

07:26:43 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000510008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:43 executing program 1:
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000780), 0x0)

07:26:44 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000100)='htcp\x00', 0x5)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f00000000c0)='dctcp\x00', 0x6)

07:26:44 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  545.181281][T15129] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  545.258707][T15132] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x9300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:44 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040), 0x88)

07:26:44 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000610008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:44 executing program 1:
getresgid(&(0x7f0000000980), 0x0, &(0x7f0000000a00))

07:26:44 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
sendmsg(r2, &(0x7f0000000480)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x2d0}, 0x0)

07:26:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x4, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  546.014908][T15147] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:45 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  546.078985][T15151] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000710008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:45 executing program 1:
getgroups(0x1, &(0x7f0000000540)=[0xffffffffffffffff])

07:26:45 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000300)='dctcp\x00', 0x6)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='vegas\x00', 0x6)

07:26:45 executing program 5:
r0 = socket$inet6(0x1c, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f0000000100))

07:26:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x7, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:45 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000a0710008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:46 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0))

07:26:46 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000580)=@in={0x10, 0x2}, 0x10)

07:26:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/115, 0x73}], 0x1}, 0x0)
r1 = socket(0x1c, 0x5, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/60, 0x3c}, {0x0}, {0x0}, {0x0}], 0x4}, 0x40042)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r3, 0x0, 0x1e51de7a2ef3af5, 0x0, 0x0, 0x800e00746)
shutdown(r2, 0x0)
readv(r1, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/112, 0x70}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5)
shutdown(r3, 0x0)

07:26:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x3b, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:46 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:46 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c)

07:26:46 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c)
sendto(r0, &(0x7f0000000100)="ff", 0x1, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c)

07:26:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000a0810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  547.988023][T15204] validate_nla: 8 callbacks suppressed
[  547.988104][T15204] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  548.003782][T15204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  548.152303][T15211] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  548.161021][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
07:26:47 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  548.429567][T15218] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  548.498347][T15221] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:47 executing program 1:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c)

07:26:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x50, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:47 executing program 2:
open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

07:26:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000910008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:47 executing program 5:
getresgid(0x0, &(0x7f00000009c0), 0x0)

[  549.064519][T15233] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  549.197614][T15237] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
07:26:48 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  549.321301][T15239] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  549.399163][T15241] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:48 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendto(r1, 0x0, 0x0, 0x20184, &(0x7f0000000240)=@in={0x10, 0x2}, 0x10)

07:26:48 executing program 2:
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60d71a370014000000000000000000000000ff4632ffc858ffac"], 0x0)

07:26:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x2, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:48 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)

07:26:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000a0910008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:49 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  550.089221][T15260] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  550.166239][T15261] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:49 executing program 2:
semget(0x1, 0x3, 0x85)

07:26:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:49 executing program 5:
connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0xa}, 0xffffffffffffffce)

07:26:49 executing program 1:
r0 = socket$inet6(0x1c, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0)

07:26:49 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:49 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:49 executing program 2:
r0 = socket$inet6(0x1c, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f0000000100))

07:26:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:49 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
r3 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
r4 = dup2(r3, r3)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB='\x00', @ANYRES32=<r5=>0x0], &(0x7f0000001700)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x108, &(0x7f0000000040)={r5}, &(0x7f00000000c0)=0x18)

07:26:50 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
bind$inet(r2, &(0x7f0000000040)={0x10, 0x2}, 0x10)

07:26:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00070a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:50 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:50 executing program 2:
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x50, &(0x7f00000000c0)={0x5, {{0x1c, 0x1c}}}, 0x88)

07:26:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:51 executing program 5:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)

07:26:51 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10)

07:26:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00080a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:51 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x9, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:51 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x401, 0x0, &(0x7f0000000000))

07:26:51 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0xb)

07:26:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00090a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:52 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10)

07:26:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  553.277101][T15340] validate_nla: 8 callbacks suppressed
[  553.277185][T15340] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  553.334167][T15343] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it!
[  553.360172][T15344] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:52 executing program 2:
r0 = socket$inet6(0x1c, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c)

07:26:52 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10)

07:26:52 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x29, &(0x7f0000000040)={0x0, 0x316ea3b}, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000040)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f00000001c0)={r3}, &(0x7f0000000200)=0x8)

07:26:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000a0a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  554.212465][T15369] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:53 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000040)="423d0a39714b778169e16da8d742e8653eac81570481566c207c7fde9001bf220345d8743500efe72d08270147ade185eaead09a6fb74e0c6a62352da834d1def75ca620d1387817142398139542b05f6673302c8bc0c49aaaa66a40671b222150370b9dd243a4ea93196e1e006d26f75d9f830c65304b72d3c97419347f408f546247b168febb97152df753c03891c75bdd1f2f92563716affbc36b7f77d88b856ee04ae29d8bb1543ed7b612fcaabbc6ef96e319b2f479836c70d969daba734193b8e27789a56e", 0xc8)

[  554.327637][T15372] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:53 executing program 1:
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x3)

07:26:53 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x3a)

07:26:53 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000b10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:54 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r0, 0x0, 0xffffffffffffff53, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10)

[  554.990303][T15388] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  555.067346][T15391] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:54 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000740), 0x10)

07:26:54 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10)

07:26:54 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  555.315319][T15393] netlink: 'syz-executor.3': attribute type 16 has an invalid length.
07:26:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000c10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  555.408714][T15397] netlink: 'syz-executor.3': attribute type 16 has an invalid length.
07:26:54 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10)
listen(r0, 0xe9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10)
sendto(r1, &(0x7f00000012c0)='d', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000000c0)='u', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x5600}, 0x10)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)

07:26:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x11, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  555.735431][T15404] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:54 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg(r0, &(0x7f0000000980)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x230}, 0x0)

[  555.799161][T15405] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:54 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:55 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c)

07:26:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000d10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:55 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="e9", 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10)

07:26:55 executing program 5:
r0 = socket$inet6_sctp(0x1c, 0x1, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

07:26:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x116, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:55 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:55 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c)

07:26:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000e10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:56 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0xe9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x10}, 0x98)

07:26:56 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x79)

07:26:56 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x12d, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:56 executing program 1:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x33)

07:26:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000f10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:56 executing program 5:
r0 = socket$inet6(0x1c, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0x181, &(0x7f0000001000)=@in={0x10, 0x2}, 0x10)

07:26:56 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10)
getsockname$inet(r0, 0x0, &(0x7f0000000080))

07:26:56 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb800, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:57 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r0, 0xe9)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x2, 0x10}, 0x98)

07:26:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00001110008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:57 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c)
getsockname(r0, 0x0, &(0x7f0000000040))

07:26:57 executing program 5:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cdg\x00', 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='dctcp\x00', 0x6)

07:26:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x4, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:57 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  558.883121][T15483] validate_nla: 6 callbacks suppressed
[  558.883190][T15483] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  558.990132][T15489] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:58 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
recvfrom$inet(r0, 0x0, 0x0, 0x400c3, 0x0, 0x0)

[  559.100090][T15494] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'.
[  559.273333][T15499] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'.
07:26:58 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="feff0002"], 0x8)

07:26:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00001210008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:58 executing program 5:
sigaltstack(&(0x7f0000ffd000/0x2000)=nil, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

07:26:58 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x48, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  559.929535][T15508] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:58 executing program 1:
r0 = socket$inet6(0x1c, 0x1, 0x0)
sendto(r0, &(0x7f0000000000)="7a36eb85b793d96d3a8003b2f28ce116b780b39ba5d4681a757684e18dc58dbebadcbda5aab5dcf7fc7faae06004cd644c17dd6d4e6d44c03ddd05803987e2c734c4edfa989f82edc6", 0x49, 0x0, &(0x7f0000001000)=@in6={0x1c, 0x1c, 0x1}, 0x1c)

[  560.017262][T15513] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:26:59 executing program 2:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89e0, &(0x7f0000005200)={'bridge_slave_1\x00', 0x0})

07:26:59 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x0)

07:26:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x116, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:26:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00002010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:26:59 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:26:59 executing program 5:
syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="021a7fa1c54f15db7dfb92a0"}}}}}, 0x0)

07:27:00 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8901, &(0x7f0000000000)={@loopback})

[  561.015085][T15532] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:00 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x6000000)

[  561.061608][T15534] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x12d, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:00 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:00 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00002510008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:00 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x40284504, &(0x7f0000000040)=""/114)

07:27:00 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140))

07:27:00 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002840)={&(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002680)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@ipv4]}}}], 0x28}, 0x0)

07:27:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  561.850101][T15553] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  561.911328][T15555] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:01 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:01 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x0, 0xffffffff, 0x388, 0x1e0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'bond_slave_1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [], [], 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)

07:27:01 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00884710008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

07:27:01 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f0000001280)='cifs.spnego\x00', &(0x7f00000012c0)={'syz', 0x0}, 0x0)

07:27:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{0x2}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  562.574429][T15569] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  562.648211][T15571] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:01 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x88, 0x64, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14)

07:27:01 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:02 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00004810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:02 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x2, &(0x7f0000001880))

07:27:02 executing program 1:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000002280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

07:27:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{0x3}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:02 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback, 0x0, r2})

07:27:02 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:02 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00884810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:02 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x160, 0x0, 0x0)

07:27:02 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x420, 0x11, 0x1, 0x0, 0x0, {0x0, 0x9}}, 0x420}}, 0x0)

07:27:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:03 executing program 5:
bpf$MAP_DELETE_ELEM(0x7, 0x0, 0x0)

[  564.010682][T15601] validate_nla: 2 callbacks suppressed
[  564.010756][T15601] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  564.092158][T15603] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:03 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  564.284824][T15607] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.1'.
07:27:03 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00004c10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:03 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040))

07:27:03 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000100765517ef26", @ANYRES32, @ANYBLOB="0000000406"], 0x48}}, 0x0)

07:27:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{0x0, 0x2}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:03 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x420, 0x11, 0x1, 0x0, 0x0, {0x0, 0xa}}, 0x420}}, 0x0)

[  564.801838][T15617] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:03 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  564.868113][T15619] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  565.021677][T15622] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
07:27:04 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)=@in6={0xa, 0x4e21, 0x0, @local, 0x8}, 0x80)

[  565.113477][T15625] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.5'.
07:27:04 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00655810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:04 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000180001042bbd7400fbdbdf250a"], 0xbc}}, 0x0)

07:27:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{0x0, 0x3}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:04 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f00000003c0)=""/16, 0x10)

07:27:04 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  565.616956][T15633] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  565.665873][T15634] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  565.779851][T15639] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.5'.
07:27:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0)

07:27:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:05 executing program 5:
r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x18, 0x3, &(0x7f00000024c0)=@framed, &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002580), 0x10}, 0x78)

07:27:05 executing program 1:
socketpair(0xa, 0x3, 0x5, &(0x7f0000000100))

07:27:05 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  566.388465][T15648] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:05 executing program 2:
syz_emit_ethernet(0x38, &(0x7f0000000200)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 't=<', 0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @private1, {[], "06c3"}}}}}, 0x0)

[  566.472411][T15652] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:05 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xe, "7a8a3a45f46bd1a0ea7867bc"}, {0x0, 0x10, "453b5887371708d925b06309bfe7"}, {0x0, 0x5, '5Q1'}]}]}}}], 0x2}, 0x0)

07:27:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00586510008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:05 executing program 1:
request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-)@:/(-\x00', 0x0)

07:27:05 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:06 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @exit, @exit, @jmp, @generic={0xdb}], &(0x7f0000000080)='GPL\x00', 0x6, 0x93, &(0x7f00000000c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  567.219037][T15669] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  567.300207][T15672] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:06 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x6, 0x1d, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x14)

07:27:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:06 executing program 1:
add_key$fscrypt_v1(&(0x7f0000002600), &(0x7f0000002640)={'fscrypt:', @auto=[0x32, 0x36, 0x0, 0x33, 0x31, 0x65, 0x60]}, &(0x7f0000002680)={0x0, "ef05a1e1f89b77471cb334f7039c05fd09a72208f86e11e78efdb0372a523bbd84c87d8ea2600097f631b38621b179481db8d586aaa04c48c26200"}, 0x48, 0xfffffffffffffffb)

07:27:06 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:06 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x1f}})

07:27:07 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000240)={0x80002010})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a40), r2)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1c000}, 0x40000)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x488820, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket(0x23, 0x80000, 0x34ec4e22)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5], 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x4001)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000001c0)={'syzkaller1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r7}, 0x14)
r8 = socket$inet6(0xa, 0x3, 0x4)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@private1, 0x10, r7})

07:27:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000160001022bbd7400fbdbdf250a"], 0xbc}}, 0x0)
recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/233, 0xe9}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)

07:27:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:07 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:07 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006c10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:07 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000006000000182300", @ANYRES32, @ANYBLOB="000000dd"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xad, &(0x7f0000000080)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x5a0, 0x3e0, 0x2, 0xffffffff, 0x2f0, 0xe8, 0x4d0, 0x4d0, 0xffffffff, 0x4d0, 0x4d0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'bond_slave_1\x00', 'veth1_to_hsr\x00'}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @mcast1, @dev, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @mcast2, @rand_addr=' \x01\x00', @mcast1, @private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [], [], 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)

07:27:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:07 executing program 1:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @rand_addr=0x64010101, {[@generic={0x89, 0x3, "8e"}, @generic={0x86, 0x8, "a20b5661f5cf"}]}}, @redirect={0x5, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local}}}}}}, 0x0)

07:27:08 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:08 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00007410008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:08 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x10, 0x1}, 0x420}}, 0x0)

07:27:08 executing program 5:
syz_emit_ethernet(0x32, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1, {[@generic={0x88, 0x2}, @timestamp_addr={0x44, 0x4, 0x82}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)

07:27:08 executing program 1:
add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, 0x0, 0xfffffffffffffffd)

[  569.545089][T15720] validate_nla: 4 callbacks suppressed
[  569.545158][T15720] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  569.655901][T15721] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:08 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:08 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "44176659d67abd160b1457a9a98880dc5cc55c61c398685cea35ebfc127e19e9e4592a075b4e69832479998a233fea07eec7eabf638807b88779a1fd0c0d31aa"}, 0x48, 0xfffffffffffffffb)
keyctl$get_security(0x11, r0, 0x0, 0x0)

07:27:09 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00007a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:09 executing program 5:
keyctl$setperm(0x5, 0x0, 0x41)

07:27:09 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88)

07:27:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  570.332188][T15736] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:09 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  570.397982][T15739] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x0, 0xffffffff, 0x388, 0x1e0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0x1e0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'bond_slave_1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [], [], 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)

07:27:09 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0)

07:27:09 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00008110008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:09 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0)

07:27:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  571.101011][T15754] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:10 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  571.149177][T15757] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  571.288655][ T3129] ieee802154 phy0 wpan0: encryption failed: -22
[  571.295927][ T3129] ieee802154 phy1 wpan1: encryption failed: -22
07:27:10 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0)

07:27:10 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xc8202, 0x0)
write$tun(r0, 0x0, 0x0)

07:27:10 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00478810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:10 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x80087601, 0x0)

07:27:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  571.778346][T15770] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  571.850048][T15773] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:10 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:10 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000023c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}, 0x7ffffff7)

07:27:11 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000023c0)={&(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000020010000000000000000db68c31f77239b"], 0x28}, 0x0)

07:27:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000680001002bbd7000fbdbdf25000004002300000004"], 0x74}}, 0x0)

07:27:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00488810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x2}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  572.584999][T15787] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:11 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @mss, @window, @sack_perm, @window], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:11 executing program 2:
syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0x3, 0xf0}]}}}}}}, 0x0)

[  572.656906][T15788] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:11 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

07:27:11 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0)

07:27:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000003008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x3}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:12 executing program 5:
r0 = socket$inet(0x2, 0xa, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x0)

07:27:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000140001"], 0xbc}}, 0x0)
recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/57, 0x39}, {0x0}, {0x0}, {&(0x7f0000000240)=""/66, 0x42}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)=""/13, 0xd}], 0xa}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/190, 0xbd}, {&(0x7f0000000000)=""/191, 0xbf}, {&(0x7f00000002c0)=""/206, 0xce}], 0x3}}], 0x40000000000013a, 0x142, 0x0)

07:27:12 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:12 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000005200)={'bridge_slave_1\x00', &(0x7f0000001f00)=@ethtool_sset_info})

07:27:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000005008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  573.803719][T15814] bridge_slave_1: mtu greater than device maximum
07:27:12 executing program 5:
syz_emit_ethernet(0xa8, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e22, 0x86, 0x0, @opaque="021a7fa1c54f15db7dfb92a05ba57911db11a837dfe1086e2ed37aad76c1ef763882f2708fa43a3828de6ad9088d3e169d0636a9e6d81f569088e7b8b02e9c93bf928d80eebcc9fcac791edff7433082239218049da294bc8bd2fdc80fea21ef771f2ef3f3bd119585738b5e25e74e449bbbef9e7a3e35b7eb5376cd1dca"}}}}}, 0x0)

07:27:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x4}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:13 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:13 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000000)=@raw=[@initr0, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @exit, @exit, @jmp, @generic={0xdb}], &(0x7f0000000080)='GPL\x00', 0x6, 0x93, &(0x7f00000000c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:13 executing program 1:
mmap$IORING_OFF_CQ_RING(&(0x7f0000bff000/0x400000)=nil, 0x400002, 0xa, 0x8032, 0xffffffffffffffff, 0x8000000)

07:27:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000006008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:13 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)=@getae={0x40, 0x1f, 0x1, 0x0, 0x0, {{@in6=@loopback, 0x0, 0x2}, @in6=@private2}}, 0x40}}, 0x0)

07:27:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x5}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:13 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x6, 0xd, 0x0, &(0x7f0000000040))

07:27:13 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x283, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)

[  574.719072][T15834] validate_nla: 4 callbacks suppressed
[  574.719137][T15834] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  574.814022][T15836] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:13 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x420, 0x11, 0x1, 0x0, 0x0, {0x0, 0x2}}, 0x420}}, 0x0)

07:27:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000007008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:14 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  575.270667][T15847] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.5'.
07:27:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x6}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:14 executing program 1:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0)

07:27:14 executing program 2:
syz_emit_ethernet(0x78, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e22, 0x56, 0x0, @opaque="021a7fa1c54f15db7dfb92a05ba57911db11a837dfe1086e2ed37aad76c1ef763882f2708fa43a3828de6ad9088d3e169d0636a9e6d81f569088e7b8b02e9c933f928d80eebcfecc66c1f63efe46"}}}}}, 0x0)

[  575.436349][T15849] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:14 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)=@getae={0x40, 0x26, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in6=@private2}}, 0x40}}, 0x0)

[  575.513634][T15850] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000009008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:14 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

[  575.930162][T15862] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'.
07:27:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x7}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:15 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000035c0)={&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x200001d0, &(0x7f0000003400)=[{&(0x7f0000000200)="913def9a0ff50654cb4025576fbd0137d7d5499ac690913c9e43765bb3c68a62ffc6a2ebaf0400dfde42293e3f7afe29af444b22b023644ba1610538a976394679b523bbfda807014de88dfc2f8929aebcd7b173dedca6ff1a7705c70de002eda3fd726aca43af9457774cf861ada2bd80fd8a0ffe7e88086d69aba4", 0x7c}], 0x1}, 0x0)

07:27:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000040))

[  576.145455][T15864] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  576.188458][T15865] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:15 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8918, &(0x7f0000000000)={@loopback, 0x0, r2})

07:27:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000a008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:15 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x8}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:15 executing program 1:
syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1, {[@end, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)

07:27:15 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x0, 0xffffffff, 0x388, 0x1e0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'bond_slave_1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [], [], 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)

07:27:15 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="614000c4ff"], &(0x7f0000000040)='GPL\x00', 0x4, 0xa9, &(0x7f0000000080)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  576.862758][T15880] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  576.897544][T15881] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000b008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:16 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x9}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:16 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000005200)={'bridge_slave_1\x00', 0x0})

07:27:16 executing program 2:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}}, 0x0)

07:27:16 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x14)

[  577.572405][T15895] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  577.632277][T15898] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000c008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:16 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:17 executing program 5:
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "7e2e80", 0x28, 0x6, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}}, 0x0)

07:27:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0xc}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:17 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)=@getae={0x10, 0x1f, 0x0, 0x0, 0x0, {{@in6=@loopback={0x100000009effffff}}, @in6=@private2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x8c}}, 0x0)

07:27:17 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, 0x0)

07:27:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000d008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:17 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xe2}]}}}], 0x18}, 0x0)

07:27:17 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x200006ad, 0x40028c5, 0x0, 0xfffffffffffffff7)

07:27:17 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000000)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0)

07:27:17 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x10}}], 0x10}, 0x0)

07:27:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0xf}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000e008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:18 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000023c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}, 0x0)

07:27:18 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, 0x0, 0x0, 0x40028c5, 0x0, 0x0)

07:27:18 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbba80800450200280000000000049078ac1478021a7fa1c54f15db7dfb92a0"], 0x0)

07:27:18 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x25e)

07:27:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x60}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:18 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='ns\x00')
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000)

07:27:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000210008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:18 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, 0x0, 0x0, 0x40028c5, 0x0, 0x0)

07:27:19 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}, 0x0)

07:27:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x93}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:19 executing program 2:
futex(&(0x7f0000000240)=0x2, 0x6, 0x0, 0x0, 0x0, 0x0)

[  580.144942][T15961] validate_nla: 6 callbacks suppressed
[  580.145010][T15961] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:19 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2, 0x0, r2})

[  580.286391][T15963] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:19 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, 0x0, 0x0, 0x40028c5, 0x0, 0x0)

07:27:19 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000310008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:19 executing program 1:
syz_emit_ethernet(0x5e, &(0x7f0000001100)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "d96787", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0)

07:27:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x300}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0)

07:27:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, 0x24}}, 0x0)

[  580.933802][T15978] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  581.003916][T15979] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:20 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540), 0x0, 0x40028c5, 0x0, 0x0)

07:27:20 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000410008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x500}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:20 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000006000000182300", @ANYRES32, @ANYBLOB='\x00\f'], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xad, &(0x7f0000000080)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:20 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5460, 0x0)

07:27:20 executing program 5:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000002280)={<r0=>0xffffffffffffffff})
sendmsg$AUDIT_GET(r0, &(0x7f0000002380)={&(0x7f00000022c0), 0xc, &(0x7f0000002340)={0x0}}, 0x0)

[  581.683633][T15994] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  581.765643][T15998] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:20 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540), 0x0, 0x40028c5, 0x0, 0x0)

07:27:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x600}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000510008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xe44, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x494, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x424, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x528, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x4ac, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}]}, {0x454, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0)

07:27:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000841"], 0x68}}, 0x0)

07:27:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x40)

[  582.524890][T16015] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  582.607496][T16018] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x700}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:21 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540), 0x0, 0x40028c5, 0x0, 0x0)

07:27:21 executing program 1:
r0 = socket(0x10, 0x2, 0xa)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x674c}}, 0x420}}, 0x0)

07:27:21 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x10000000)

07:27:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000610008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:22 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17}, 0x40)

07:27:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x900}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  583.356868][T16034] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  583.405701][T16035] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:22 executing program 1:
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1, {[@end]}}, {0x0, 0x0, 0x8}}}}}, 0x0)

07:27:22 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x103, 0x40028c5, 0x0, 0x0)

07:27:22 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x3c, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14)

07:27:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="10002d"], 0x4c}}, 0x0)

07:27:22 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000710008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0xc00}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:23 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0)

07:27:23 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002900000004df1bc70e0000000000000014"], 0x30}, 0x0)

07:27:23 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02fa", 0x103, 0x40028c5, 0x0, 0x0)

07:27:23 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x420, 0x11, 0x1, 0x0, 0x0, {0x7}}, 0x420}}, 0x0)

07:27:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0xf00}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:23 executing program 5:
r0 = socket(0xa, 0x3, 0x7)
setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0)

07:27:23 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14}, 0x14}}, 0x0)

07:27:23 executing program 2:
mlockall(0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='status\x00')
accept(r0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x2, &(0x7f0000000100)='$\x00'}, 0x30)
r1 = getpid()
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x2f, 0x1}, &(0x7f00000001c0))
syz_open_procfs(r1, 0x0)
r2 = getpid()
syz_open_procfs(r2, 0x0)

07:27:24 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x103, 0x40028c5, 0x0, 0x0)

07:27:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000910008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:24 executing program 1:
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$assume_authority(0x10, 0x0)

07:27:24 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x5451, 0x0)

07:27:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x1300}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:24 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0)

[  585.513455][T16079] validate_nla: 4 callbacks suppressed
[  585.513528][T16079] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  585.600072][T16080] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:24 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x184, 0x40028c5, 0x0, 0x0)

07:27:24 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14)

07:27:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:25 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x48, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x14)

07:27:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000680001002bbd7000fbdbdf2500000400230000000400040006000300000000003c00020002000000f400000000000000f300000000000000850000000100000000000000020000000900000001000000080000000000000080000000140006"], 0x74}}, 0x0)

07:27:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {0x6000}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  586.258615][T16095] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:25 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x184, 0x40028c5, 0x0, 0x0)

[  586.304898][T16097] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000b10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:25 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@hoplimit_2292={{0x14}}], 0x18}, 0x4040800)

07:27:25 executing program 5:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

07:27:25 executing program 2:
socket(0x10, 0x2, 0xa)

07:27:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  586.992263][T16111] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x184, 0x40028c5, 0x0, 0x0)

[  587.063291][T16114] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:26 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x3}]}, &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000c10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:26 executing program 5:
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1, {[@generic={0x88, 0x4, "3df2"}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)

07:27:26 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000000)=@raw=[@jmp, @generic={0xdb}], &(0x7f0000000080)='GPL\x00', 0x6, 0x93, &(0x7f00000000c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x4}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:26 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85b", 0x1c5, 0x40028c5, 0x0, 0x0)

[  587.779994][T16130] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:26 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}, 0x4040800)

[  587.848818][T16132] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:26 executing program 5:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
mmap$IORING_OFF_CQ_RING(&(0x7f0000bff000/0x400000)=nil, 0x400002, 0x0, 0x8032, 0xffffffffffffffff, 0x8000000)

07:27:27 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x300}]}}}], 0x18}, 0x0)

07:27:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000d10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x7}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:27 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1c5, 0x40028c5, 0x0, 0x0)

[  588.506396][T16148] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:27 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000700000007047c740404"], 0x18}, 0x0)

[  588.546771][T16149] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:27 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}, 0x4000855)

07:27:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000e10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0xff9f}}, 0x0)

07:27:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x3b}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:28 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1c5, 0x40028c5, 0x0, 0x0)

07:27:28 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x204180, 0x0)
select(0x40, &(0x7f0000000180)={0x7}, &(0x7f00000000c0)={0x40}, 0x0, 0x0)

07:27:28 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0}, 0x8800)

07:27:28 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@raw=[@initr0, @jmp, @generic={0xdb}], &(0x7f0000000080)='GPL\x00', 0x6, 0x93, &(0x7f00000000c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000f10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x50}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:28 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1e5, 0x40028c5, 0x0, 0x0)

07:27:28 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000023c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x0)

07:27:28 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x6, 0xa, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x14)

07:27:29 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0xffffffffffffffde, &(0x7f0000000080)=[{&(0x7f0000000200)=""/249}, {&(0x7f0000000300)=""/207}]}}, {{&(0x7f00000000c0)=@can, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/95}, {&(0x7f0000000480)=""/129}, {&(0x7f0000000540)=""/251}, {&(0x7f0000000640)=""/1}]}}], 0x13, 0x0, 0x0)

07:27:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00001010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:29 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1e5, 0x40028c5, 0x0, 0x0)

07:27:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x3b}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:29 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$unlink(0x9, 0x0, r0)

07:27:29 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000200)={@multicast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @local}}}}, 0x0)

[  590.601188][T16194] validate_nla: 4 callbacks suppressed
[  590.601267][T16194] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:29 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0x2, &(0x7f0000000040))

[  590.691564][T16195] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00001110008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:30 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1e5, 0x40028c5, 0x0, 0x0)

07:27:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x3b}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:30 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$sock(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14}}, @mark={{0x14}}], 0x5000}}], 0x1, 0x0)

07:27:30 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/39)

07:27:30 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000060000001823", @ANYRES32, @ANYBLOB="000000dd"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xad, &(0x7f0000000080)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  591.347804][T16208] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  591.392525][T16211] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:30 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1f5, 0x40028c5, 0x0, 0x0)

07:27:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00001210008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0, 0x0)

07:27:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:30 executing program 2:
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xffffffff00000000}, 0x20)

07:27:31 executing program 5:
bpf$MAP_DELETE_ELEM(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0}, 0x20)

[  592.050242][T16225] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  592.109212][T16228] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:31 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1f5, 0x40028c5, 0x0, 0x0)

07:27:31 executing program 1:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 't=<', 0x0, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @ipv4={'\x00', '\xff\xff', @loopback}}}}}, 0x0)

07:27:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00002510008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x10}]}, 0x24}}, 0x0)

07:27:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x2}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:31 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'})

[  592.764093][T16243] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  592.847479][T16245] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  592.931445][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  593.047928][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
07:27:32 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)=@getae={0x10, 0x1f, 0x0, 0x0, 0x0, {{@in6=@loopback={0x1000000000000300}}, @in6=@private2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x8c}}, 0x0)

07:27:32 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1f5, 0x40028c5, 0x0, 0x0)

07:27:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00004810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:32 executing program 5:
syz_emit_ethernet(0x12, &(0x7f0000001280)={@dev, @random="fcb6c140191b", @val={@void}, {@generic={0x4305}}}, 0x0)

07:27:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x3}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x1bbc, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x494, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x424, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x528, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x4ac, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}]}, {0x524, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x18c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2d57726fda36cd66f5f12a29b761165cb86dba0f242235acc6db68a991586a82"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}]}, {0xc64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x540, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x438, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "696b9f29c6da9ea3fc87325d403c478d067f761743f6dcd953cbc7993de0ac97"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x168, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x110, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "06e1e8570085b80322c776ce8cbc0702638e721af9bed7b583c28a76f93f5158"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_PEERS={0x170, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x130, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}]}]}, 0x1ec4}}, 0x0)

[  593.581922][T16259] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:32 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40087602, 0x0)

[  593.651260][T16263] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:32 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1fd, 0x40028c5, 0x0, 0x0)

07:27:32 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f00000035c0)={&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0}, 0x40034)

07:27:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00004c10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x4}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:33 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0)
write$tun(r0, &(0x7f0000000040)={@void, @val, @eth={@remote, @empty, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty}, "899e4c2bb731a301e269955e9f4c3d3cac951bf46f1716fef8ea571c6a670662d0a16b6193117ab7c5e71cec49660a64b151af06395dff13b0fdcab7a962fdca8b729653b1434e1accb633cacf967af3dcab34b0380c2e3a71d4bf7f8889e4dbfa4ccd1a8876071f5c4bfe4973aabf06c6b08feb5844b72b086d8137d8bc4b"}}}}}, 0xaf)

07:27:33 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSMAXCID(r0, 0x4004743c, 0x0)

07:27:33 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1fd, 0x40028c5, 0x0, 0x0)

07:27:33 executing program 5:
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)

[  594.712552][T16284] syz-executor.1 (16284) used obsolete PPPIOCDETACH ioctl
07:27:33 executing program 2:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000005200)={'bridge_slave_1\x00', 0x0})

07:27:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x5}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:33 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:34 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x1fd, 0x40028c5, 0x0, 0x0)

07:27:34 executing program 1:
syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x4ca41)

07:27:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

07:27:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006810008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:34 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x0, 0x3, &(0x7f00000024c0)=@framed, &(0x7f0000002500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x6}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:34 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x201, 0x40028c5, 0x0, 0x0)

[  595.721163][T16316] validate_nla: 4 callbacks suppressed
[  595.721241][T16316] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:34 executing program 5:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')

[  595.790269][T16318] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:34 executing program 1:
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

07:27:34 executing program 2:
syz_io_uring_setup(0x968, &(0x7f0000000300), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0))

07:27:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00006c10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x7}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

07:27:35 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x201, 0x40028c5, 0x0, 0x0)

[  596.513672][T16334] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  596.552215][T16335] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:35 executing program 2:
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000200))
syz_io_uring_setup(0x1328, &(0x7f0000000240), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$sock(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000980))

07:27:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)

07:27:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00007410008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:36 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000083011013140000102030109022402030100000921000000012200000905810300000700"/54], &(0x7f0000000500)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0xffffffffffffff88, 0x10, 0x4, 0x0, "da4f05d70d597faf0b6114bc9984703a"}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

07:27:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x8}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:36 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x201, 0x40028c5, 0x0, 0x0)

[  597.213255][T16348] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  597.278860][T16353] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:36 executing program 1:
syz_io_uring_setup(0x5dff, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))

07:27:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00007a10008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  597.653475][ T8877] usb 6-1: new high-speed USB device number 2 using dummy_hcd
07:27:36 executing program 2:
syz_io_uring_setup(0x968, &(0x7f0000000300)={0x0, 0x2245, 0x8}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), 0x0)

07:27:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x9}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:36 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x203, 0x40028c5, 0x0, 0x0)

[  597.903071][ T8877] usb 6-1: Using ep0 maxpacket: 8
[  597.912564][T16367] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  597.967523][T16369] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  598.124999][ T8877] usb 6-1: config index 0 descriptor too short (expected 548, got 36)
[  598.133794][ T8877] usb 6-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config
[  598.144457][ T8877] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3
07:27:37 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xc8}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

07:27:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:37 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}})

07:27:37 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x203, 0x40028c5, 0x0, 0x0)

[  598.485652][ T8877] usb 6-1: string descriptor 0 read error: -22
[  598.492632][ T8877] usb 6-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.40
[  598.503003][ T8877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.660882][T16387] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  598.715781][T16389] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  598.829376][ T2060] usb 6-1: USB disconnect, device number 2
[  599.637246][ T2060] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  599.893846][ T2060] usb 6-1: Using ep0 maxpacket: 8
[  600.133407][ T2060] usb 6-1: config index 0 descriptor too short (expected 548, got 36)
[  600.145108][ T2060] usb 6-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config
[  600.156761][ T2060] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3
07:27:39 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000083011013140000102030109022402030100000921000000012200000905810300000700"/54], &(0x7f0000000500)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0xffffffffffffff88, 0x10, 0x4, 0x0, "da4f05d70d597faf0b6114bc9984703a"}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

07:27:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0xc}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:39 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/vmcoreinfo', 0x14d000, 0x0)

07:27:39 executing program 1:
r0 = getpid()
open(0x0, 0x200180, 0x140)
sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
close(0xffffffffffffffff)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000010046)

07:27:39 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x203, 0x40028c5, 0x0, 0x0)

07:27:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000012008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  600.403540][ T2060] usb 6-1: string descriptor 0 read error: -71
[  600.410834][ T2060] usb 6-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.40
[  600.421338][ T2060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.593342][ T2060] usb 6-1: can't set config #1, error -71
[  600.668227][ T2060] usb 6-1: USB disconnect, device number 3
07:27:39 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x204, 0x40028c5, 0x0, 0x0)

07:27:39 executing program 2:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000b40), 0xffffffffffffffff)

07:27:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000029008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0xf}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:40 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000083011013140000102030109022402030100000921000000012200000905810300000700"/54], &(0x7f0000000500)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0xffffffffffffff88, 0x10, 0x4, 0x0, "da4f05d70d597faf0b6114bc9984703a"}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

[  601.219752][T16433] validate_nla: 4 callbacks suppressed
[  601.219818][T16433] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  601.281460][T16435] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'.
[  601.346126][T16435] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:40 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x204, 0x40028c5, 0x0, 0x0)

07:27:40 executing program 2:
r0 = add_key$keyring(&(0x7f0000003e00), &(0x7f0000003e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000002d80)='dns_resolver\x00', 0x0, &(0x7f0000002e00)="8b2d", 0x2, r0)

07:27:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x60}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:40 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000073008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  601.663281][ T8456] usb 6-1: new high-speed USB device number 4 using dummy_hcd
07:27:40 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f00000004c0), 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002000), r0)

[  601.913200][ T8456] usb 6-1: Using ep0 maxpacket: 8
[  602.090926][T16451] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  602.115735][ T8456] usb 6-1: config index 0 descriptor too short (expected 548, got 36)
[  602.124228][ T8456] usb 6-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config
07:27:41 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x204, 0x40028c5, 0x0, 0x0)

[  602.135042][ T8456] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  602.187589][T16453] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:41 executing program 2:
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
socketpair(0x17, 0x0, 0x0, 0x0)

07:27:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x93}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000002580), 0x4)

07:27:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000002008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  602.514788][ T8456] usb 6-1: string descriptor 0 read error: -22
[  602.521656][ T8456] usb 6-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.40
[  602.531217][ T8456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
07:27:41 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="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", 0x205, 0x0, 0x0, 0x0)

[  602.891677][T16470] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  602.940093][T16471] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  602.971517][ T8456] usb 6-1: USB disconnect, device number 4
07:27:42 executing program 5:
r0 = gettid()
sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0)

07:27:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x4040095)

07:27:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000), 0x1c)

07:27:42 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000003008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:42 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x205, 0x0, 0x0, 0x0)

[  603.746590][T16490] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  603.832449][T16495] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:43 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000)="92", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window, @window, @window, @window, @mss, @window, @sack_perm, @window], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000540)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe052e7f726263f28aef1bc12aea9063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cd3e84ecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae92361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b8300903e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c88982472e6aac70e5d52ca2c1bab47b1f67e0f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87f4f483c50c1cb183af1fea9fb1eb21afdfe85ba2edb2a7d0b56e2b479c8ef65bb5a354fa15e56368321f6c65c7b363818a2c6af5c6635bb203947b015b669fd12d0f7518ca03e808620554b2143296f0b098ce", 0x205, 0x0, 0x0, 0x0)

07:27:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x2}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:43 executing program 5:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), 0x0, 0x0, 0x3)

07:27:43 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x5, &(0x7f00000001c0)=@framed={{}, [@generic={0x1e, 0x0, 0x0, 0xfff9}, @call]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:43 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000004008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  604.531756][T16508] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  604.607268][T16510] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:43 executing program 5:
unshare(0x4020400)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket(0x11, 0x2, 0x0)
accept$inet6(r1, 0x0, 0x0)

07:27:43 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=0x1, 0xffffffffffffffff, 0x1d}, 0x10)

07:27:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x3}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:43 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  605.071702][T16496] not chained 10000 origins
[  605.076267][T16496] CPU: 1 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  605.085261][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  605.095692][T16496] Call Trace:
[  605.099078][T16496]  dump_stack+0x24c/0x2e0
[  605.103442][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  605.109537][T16496]  ? kmsan_get_metadata+0x116/0x180
[  605.114958][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  605.120887][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  605.126553][T16496]  ? kmsan_get_metadata+0x116/0x180
[  605.131798][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  605.137657][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  605.143764][T16496]  ? kmsan_get_metadata+0x116/0x180
[  605.149081][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  605.154746][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  605.161113][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  605.166526][T16496]  ? _copy_from_user+0x1fd/0x300
[  605.171499][T16496]  ? kmsan_get_metadata+0x116/0x180
[  605.176731][T16496]  __msan_chain_origin+0x54/0xa0
[  605.181795][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.186513][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  605.192347][T16496]  ? __msan_poison_alloca+0xec/0x110
[  605.197881][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  605.203980][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  605.209052][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.214206][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.219098][T16496]  do_syscall_64+0x9f/0x140
[  605.223741][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.229678][T16496] RIP: 0033:0x4665d9
[  605.233720][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  605.253543][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  605.262004][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  605.270224][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  605.278782][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  605.286881][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  605.295214][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  605.303336][T16496] Uninit was stored to memory at:
[  605.308370][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  605.314302][T16496]  __msan_chain_origin+0x54/0xa0
[  605.319368][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.324091][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.329148][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.334292][T16496]  do_syscall_64+0x9f/0x140
[  605.339778][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.345700][T16496] 
[  605.348239][T16496] Uninit was stored to memory at:
[  605.353261][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  605.359112][T16496]  __msan_chain_origin+0x54/0xa0
[  605.364337][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.369043][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.374178][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.379057][T16496]  do_syscall_64+0x9f/0x140
[  605.383855][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.389938][T16496] 
[  605.392279][T16496] Uninit was stored to memory at:
[  605.397408][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  605.403654][T16496]  __msan_chain_origin+0x54/0xa0
[  605.408888][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.413887][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.418885][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.423824][T16496]  do_syscall_64+0x9f/0x140
[  605.428381][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.434321][T16496] 
[  605.436656][T16496] Uninit was stored to memory at:
[  605.441864][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  605.447620][T16496]  __msan_chain_origin+0x54/0xa0
[  605.452951][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.457580][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.463011][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.468510][T16496]  do_syscall_64+0x9f/0x140
[  605.473497][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.479846][T16496] 
[  605.482297][T16496] Uninit was stored to memory at:
[  605.487767][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  605.493522][T16496]  __msan_chain_origin+0x54/0xa0
[  605.498800][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.503637][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.508613][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.513945][T16496]  do_syscall_64+0x9f/0x140
[  605.518489][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.524504][T16496] 
[  605.526889][T16496] Uninit was stored to memory at:
[  605.532155][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  605.538964][T16496]  __msan_chain_origin+0x54/0xa0
[  605.544070][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.549139][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.554209][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.559285][T16496]  do_syscall_64+0x9f/0x140
[  605.564018][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.570128][T16496] 
[  605.572471][T16496] Uninit was stored to memory at:
[  605.577781][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  605.583539][T16496]  __msan_chain_origin+0x54/0xa0
[  605.588715][T16496]  do_recvmmsg+0x17fc/0x22d0
[  605.593502][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  605.598485][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  605.603745][T16496]  do_syscall_64+0x9f/0x140
[  605.608642][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  605.614666][T16496] 
[  605.617052][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  605.623821][T16496]  do_recvmmsg+0xbf/0x22d0
[  605.628269][T16496]  do_recvmmsg+0xbf/0x22d0
[  606.510374][T16496] not chained 20000 origins
[  606.515246][T16496] CPU: 0 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  606.524417][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  606.534620][T16496] Call Trace:
[  606.537953][T16496]  dump_stack+0x24c/0x2e0
[  606.542692][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  606.548539][T16496]  ? kmsan_get_metadata+0x116/0x180
[  606.554145][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  606.560213][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  606.565978][T16496]  ? kmsan_get_metadata+0x116/0x180
[  606.571214][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  606.577254][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  606.583648][T16496]  ? kmsan_get_metadata+0x116/0x180
[  606.588886][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  606.594640][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  606.600824][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  606.606327][T16496]  ? _copy_from_user+0x1fd/0x300
[  606.611300][T16496]  ? kmsan_get_metadata+0x116/0x180
[  606.616557][T16496]  __msan_chain_origin+0x54/0xa0
[  606.621636][T16496]  do_recvmmsg+0x17fc/0x22d0
[  606.626273][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  606.632109][T16496]  ? __msan_poison_alloca+0xec/0x110
[  606.637530][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  606.643627][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  606.648704][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  606.653952][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  606.658859][T16496]  do_syscall_64+0x9f/0x140
[  606.663505][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  606.669516][T16496] RIP: 0033:0x4665d9
[  606.673532][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  606.693258][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  606.701823][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  606.709859][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  606.717949][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  606.725962][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  606.734076][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  606.742088][T16496] Uninit was stored to memory at:
[  606.747122][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  606.752896][T16496]  __msan_chain_origin+0x54/0xa0
[  606.758383][T16496]  do_recvmmsg+0x17fc/0x22d0
[  606.763288][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  606.768259][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  606.773138][T16496]  do_syscall_64+0x9f/0x140
[  606.777669][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  606.783601][T16496] 
[  606.785934][T16496] Uninit was stored to memory at:
[  606.791179][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  606.797324][T16496]  __msan_chain_origin+0x54/0xa0
[  606.802295][T16496]  do_recvmmsg+0x17fc/0x22d0
[  606.806916][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  606.811890][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  606.816939][T16496]  do_syscall_64+0x9f/0x140
[  606.821470][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  606.827742][T16496] 
[  606.830447][T16496] Uninit was stored to memory at:
[  606.835566][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  606.841319][T16496]  __msan_chain_origin+0x54/0xa0
[  606.846286][T16496]  do_recvmmsg+0x17fc/0x22d0
[  606.850905][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  606.855898][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  606.860877][T16496]  do_syscall_64+0x9f/0x140
[  606.865694][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  606.871975][T16496] 
[  606.874398][T16496] Uninit was stored to memory at:
[  606.880042][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  606.886403][T16496]  __msan_chain_origin+0x54/0xa0
[  606.891799][T16496]  do_recvmmsg+0x17fc/0x22d0
[  606.896508][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  606.901658][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  606.906803][T16496]  do_syscall_64+0x9f/0x140
[  606.911332][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  606.917255][T16496] 
[  606.919607][T16496] Uninit was stored to memory at:
[  606.924714][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  606.930672][T16496]  __msan_chain_origin+0x54/0xa0
[  606.935642][T16496]  do_recvmmsg+0x17fc/0x22d0
[  606.940368][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  606.945442][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  606.950412][T16496]  do_syscall_64+0x9f/0x140
[  606.955198][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  606.961120][T16496] 
[  606.963477][T16496] Uninit was stored to memory at:
[  606.968501][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  606.974454][T16496]  __msan_chain_origin+0x54/0xa0
[  606.979415][T16496]  do_recvmmsg+0x17fc/0x22d0
[  606.984069][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  606.989044][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  606.994050][T16496]  do_syscall_64+0x9f/0x140
[  606.998963][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.004978][T16496] 
[  607.007514][T16496] Uninit was stored to memory at:
[  607.016202][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.021957][T16496]  __msan_chain_origin+0x54/0xa0
[  607.027056][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.031671][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.036654][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.041714][T16496]  do_syscall_64+0x9f/0x140
[  607.046294][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.052218][T16496] 
[  607.054546][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  607.061248][T16496]  do_recvmmsg+0xbf/0x22d0
[  607.065690][T16496]  do_recvmmsg+0xbf/0x22d0
[  607.165814][T16496] not chained 30000 origins
[  607.170375][T16496] CPU: 0 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  607.179256][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  607.189649][T16496] Call Trace:
[  607.192941][T16496]  dump_stack+0x24c/0x2e0
[  607.197393][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  607.203146][T16496]  ? kmsan_get_metadata+0x116/0x180
[  607.208399][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  607.214586][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  607.220466][T16496]  ? kmsan_get_metadata+0x116/0x180
[  607.225704][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  607.231656][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  607.238635][T16496]  ? kmsan_get_metadata+0x116/0x180
[  607.243972][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  607.249637][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  607.256124][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  607.261732][T16496]  ? _copy_from_user+0x1fd/0x300
[  607.267072][T16496]  ? kmsan_get_metadata+0x116/0x180
[  607.272392][T16496]  __msan_chain_origin+0x54/0xa0
[  607.277674][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.282402][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  607.288311][T16496]  ? __msan_poison_alloca+0xec/0x110
[  607.294126][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  607.300901][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  607.306057][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.311071][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.315959][T16496]  do_syscall_64+0x9f/0x140
[  607.320496][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.326725][T16496] RIP: 0033:0x4665d9
[  607.330817][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  607.350665][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  607.360199][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  607.369133][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  607.377606][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  607.386738][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  607.394863][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  607.402964][T16496] Uninit was stored to memory at:
[  607.408088][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.414305][T16496]  __msan_chain_origin+0x54/0xa0
[  607.419554][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.424397][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.429741][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.434707][T16496]  do_syscall_64+0x9f/0x140
[  607.439348][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.445414][T16496] 
[  607.448017][T16496] Uninit was stored to memory at:
[  607.453387][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.459527][T16496]  __msan_chain_origin+0x54/0xa0
[  607.465230][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.471144][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.476324][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.481209][T16496]  do_syscall_64+0x9f/0x140
[  607.485743][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.491957][T16496] 
[  607.494295][T16496] Uninit was stored to memory at:
[  607.499855][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.505972][T16496]  __msan_chain_origin+0x54/0xa0
[  607.510964][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.515669][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.520738][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.525704][T16496]  do_syscall_64+0x9f/0x140
[  607.530585][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.536768][T16496] 
[  607.539268][T16496] Uninit was stored to memory at:
[  607.544673][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.550421][T16496]  __msan_chain_origin+0x54/0xa0
[  607.555387][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.560381][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.565525][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.570899][T16496]  do_syscall_64+0x9f/0x140
[  607.575781][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.582251][T16496] 
[  607.584683][T16496] Uninit was stored to memory at:
[  607.589732][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.595593][T16496]  __msan_chain_origin+0x54/0xa0
[  607.601104][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.605720][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.610776][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.616535][T16496]  do_syscall_64+0x9f/0x140
[  607.621475][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.637785][T16496] 
[  607.642714][T16496] Uninit was stored to memory at:
[  607.647833][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.654232][T16496]  __msan_chain_origin+0x54/0xa0
[  607.659216][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.664039][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.669096][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.674183][T16496]  do_syscall_64+0x9f/0x140
[  607.678736][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.684763][T16496] 
[  607.687122][T16496] Uninit was stored to memory at:
[  607.692274][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  607.698026][T16496]  __msan_chain_origin+0x54/0xa0
[  607.703178][T16496]  do_recvmmsg+0x17fc/0x22d0
[  607.708029][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  607.713272][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  607.718242][T16496]  do_syscall_64+0x9f/0x140
[  607.722949][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  607.729027][T16496] 
[  607.731360][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  607.738221][T16496]  do_recvmmsg+0xbf/0x22d0
[  607.742682][T16496]  do_recvmmsg+0xbf/0x22d0
[  608.064172][T16496] not chained 40000 origins
[  608.068931][T16496] CPU: 1 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  608.083194][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  608.093811][T16496] Call Trace:
[  608.097121][T16496]  dump_stack+0x24c/0x2e0
[  608.101512][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  608.107303][T16496]  ? kmsan_get_metadata+0x116/0x180
[  608.112576][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  608.118513][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  608.124502][T16496]  ? kmsan_get_metadata+0x116/0x180
[  608.129914][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  608.136188][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  608.142291][T16496]  ? kmsan_get_metadata+0x116/0x180
[  608.147879][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  608.153559][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  608.159858][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  608.165246][T16496]  ? _copy_from_user+0x1fd/0x300
[  608.170484][T16496]  ? kmsan_get_metadata+0x116/0x180
[  608.175723][T16496]  __msan_chain_origin+0x54/0xa0
[  608.180734][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.185372][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  608.191175][T16496]  ? __msan_poison_alloca+0xec/0x110
[  608.196581][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  608.202944][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  608.208027][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.213157][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.218222][T16496]  do_syscall_64+0x9f/0x140
[  608.222954][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.228980][T16496] RIP: 0033:0x4665d9
[  608.232908][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  608.252760][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  608.261488][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  608.269801][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  608.278456][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  608.287080][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  608.295347][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  608.303360][T16496] Uninit was stored to memory at:
[  608.308902][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  608.314656][T16496]  __msan_chain_origin+0x54/0xa0
[  608.319612][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.324221][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.329176][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.334048][T16496]  do_syscall_64+0x9f/0x140
[  608.338691][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.344689][T16496] 
[  608.347025][T16496] Uninit was stored to memory at:
[  608.352147][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  608.358086][T16496]  __msan_chain_origin+0x54/0xa0
[  608.363198][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.367896][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.372950][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.377877][T16496]  do_syscall_64+0x9f/0x140
[  608.382412][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.388344][T16496] 
[  608.390702][T16496] Uninit was stored to memory at:
[  608.395739][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  608.401678][T16496]  __msan_chain_origin+0x54/0xa0
[  608.406646][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.411392][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.416365][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.421359][T16496]  do_syscall_64+0x9f/0x140
[  608.425985][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.432011][T16496] 
[  608.434341][T16496] Uninit was stored to memory at:
[  608.439358][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  608.445098][T16496]  __msan_chain_origin+0x54/0xa0
[  608.450058][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.454762][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.459730][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.464704][T16496]  do_syscall_64+0x9f/0x140
[  608.469273][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.475208][T16496] 
[  608.477574][T16496] Uninit was stored to memory at:
[  608.482883][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  608.488628][T16496]  __msan_chain_origin+0x54/0xa0
[  608.493629][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.498340][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.503392][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.509849][T16496]  do_syscall_64+0x9f/0x140
[  608.514612][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.521010][T16496] 
[  608.523344][T16496] Uninit was stored to memory at:
[  608.528474][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  608.534309][T16496]  __msan_chain_origin+0x54/0xa0
[  608.539270][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.544365][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.549595][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.554485][T16496]  do_syscall_64+0x9f/0x140
[  608.559019][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.564933][T16496] 
[  608.567358][T16496] Uninit was stored to memory at:
[  608.572385][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  608.578140][T16496]  __msan_chain_origin+0x54/0xa0
[  608.583203][T16496]  do_recvmmsg+0x17fc/0x22d0
[  608.588089][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  608.593343][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  608.598230][T16496]  do_syscall_64+0x9f/0x140
[  608.602935][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.609112][T16496] 
[  608.611448][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  608.618418][T16496]  do_recvmmsg+0xbf/0x22d0
[  608.623300][T16496]  do_recvmmsg+0xbf/0x22d0
[  608.814810][T16494] not chained 50000 origins
[  608.820261][T16494] CPU: 0 PID: 16494 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  608.829049][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  608.839140][T16494] Call Trace:
[  608.842434][T16494]  dump_stack+0x24c/0x2e0
[  608.846799][T16494]  kmsan_internal_chain_origin+0x6f/0x130
[  608.852752][T16494]  ? kmsan_get_metadata+0x116/0x180
[  608.857984][T16494]  ? kmsan_internal_check_memory+0xb5/0x520
[  608.864252][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  608.870353][T16494]  ? kmsan_get_metadata+0x116/0x180
[  608.875603][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  608.881803][T16494]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  608.887914][T16494]  ? kmsan_get_metadata+0x116/0x180
[  608.893148][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  608.898812][T16494]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  608.904936][T16494]  ? kmsan_unpoison_shadow+0x74/0xa0
[  608.910346][T16494]  ? _copy_from_user+0x1fd/0x300
[  608.915780][T16494]  ? kmsan_get_metadata+0x116/0x180
[  608.921012][T16494]  __msan_chain_origin+0x54/0xa0
[  608.926194][T16494]  do_recvmmsg+0x17fc/0x22d0
[  608.930827][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  608.937219][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  608.942881][T16494]  ? __msan_poison_alloca+0xec/0x110
[  608.948283][T16494]  ? __msan_instrument_asm_store+0x107/0x130
[  608.954410][T16494]  ? __se_sys_recvmmsg+0xd6/0x410
[  608.959596][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  608.964576][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  608.969699][T16494]  do_syscall_64+0x9f/0x140
[  608.974231][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  608.980326][T16494] RIP: 0033:0x4665d9
[  608.984334][T16494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  609.004266][T16494] RSP: 002b:00007fb2c0e3f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  609.013107][T16494] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  609.021120][T16494] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  609.029218][T16494] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  609.037235][T16494] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c038
[  609.045528][T16494] R13: 0000000000a9fb1f R14: 00007fb2c0e3f300 R15: 0000000000022000
[  609.053745][T16494] Uninit was stored to memory at:
[  609.059077][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  609.064916][T16494]  __msan_chain_origin+0x54/0xa0
[  609.070058][T16494]  do_recvmmsg+0x17fc/0x22d0
[  609.074678][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  609.079645][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  609.084778][T16494]  do_syscall_64+0x9f/0x140
[  609.089330][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  609.095434][T16494] 
[  609.097768][T16494] Uninit was stored to memory at:
[  609.102794][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  609.108756][T16494]  __msan_chain_origin+0x54/0xa0
[  609.113802][T16494]  do_recvmmsg+0x17fc/0x22d0
[  609.118423][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  609.123472][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  609.128435][T16494]  do_syscall_64+0x9f/0x140
[  609.133099][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  609.139025][T16494] 
[  609.141444][T16494] Uninit was stored to memory at:
[  609.146635][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  609.152382][T16494]  __msan_chain_origin+0x54/0xa0
[  609.157592][T16494]  do_recvmmsg+0x17fc/0x22d0
[  609.162227][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  609.167283][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  609.172253][T16494]  do_syscall_64+0x9f/0x140
[  609.176835][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  609.182956][T16494] 
[  609.185317][T16494] Uninit was stored to memory at:
[  609.190439][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  609.196186][T16494]  __msan_chain_origin+0x54/0xa0
[  609.201145][T16494]  do_recvmmsg+0x17fc/0x22d0
[  609.205848][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  609.210809][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  609.215798][T16494]  do_syscall_64+0x9f/0x140
[  609.220331][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  609.226357][T16494] 
[  609.228704][T16494] Uninit was stored to memory at:
[  609.233740][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  609.239536][T16494]  __msan_chain_origin+0x54/0xa0
[  609.244852][T16494]  do_recvmmsg+0x17fc/0x22d0
[  609.249678][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  609.254980][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  609.259891][T16494]  do_syscall_64+0x9f/0x140
[  609.264455][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  609.270513][T16494] 
[  609.273948][T16494] Uninit was stored to memory at:
[  609.279542][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  609.286481][T16494]  __msan_chain_origin+0x54/0xa0
[  609.291574][T16494]  do_recvmmsg+0x17fc/0x22d0
[  609.296658][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  609.302275][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  609.307703][T16494]  do_syscall_64+0x9f/0x140
[  609.312437][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  609.318694][T16494] 
[  609.321176][T16494] Uninit was stored to memory at:
[  609.326248][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  609.332193][T16494]  __msan_chain_origin+0x54/0xa0
[  609.337694][T16494]  do_recvmmsg+0x17fc/0x22d0
[  609.342315][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  609.347301][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  609.352270][T16494]  do_syscall_64+0x9f/0x140
[  609.356807][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  609.362991][T16494] 
[  609.365505][T16494] Local variable ----msg_sys@do_recvmmsg created at:
[  609.372762][T16494]  do_recvmmsg+0xbf/0x22d0
[  609.377248][T16494]  do_recvmmsg+0xbf/0x22d0
[  610.017706][T16496] not chained 60000 origins
[  610.022585][T16496] CPU: 1 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  610.031820][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  610.042686][T16496] Call Trace:
[  610.046035][T16496]  dump_stack+0x24c/0x2e0
[  610.050672][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  610.056490][T16496]  ? kmsan_get_metadata+0x116/0x180
[  610.061920][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  610.067856][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  610.073711][T16496]  ? kmsan_get_metadata+0x116/0x180
[  610.079054][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  610.085126][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  610.091253][T16496]  ? kmsan_get_metadata+0x116/0x180
[  610.097131][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  610.102800][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  610.109009][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  610.114352][T16496]  ? _copy_from_user+0x1fd/0x300
[  610.119750][T16496]  ? kmsan_get_metadata+0x116/0x180
[  610.124973][T16496]  __msan_chain_origin+0x54/0xa0
[  610.129963][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.134967][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  610.140629][T16496]  ? __msan_poison_alloca+0xec/0x110
[  610.146027][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  610.152212][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  610.157360][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.162605][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.167509][T16496]  do_syscall_64+0x9f/0x140
[  610.172408][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.178329][T16496] RIP: 0033:0x4665d9
[  610.182261][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  610.202091][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  610.210561][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  610.218657][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  610.226673][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  610.234840][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  610.243194][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  610.251397][T16496] Uninit was stored to memory at:
[  610.256462][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  610.262342][T16496]  __msan_chain_origin+0x54/0xa0
[  610.267606][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.273010][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.278143][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.283107][T16496]  do_syscall_64+0x9f/0x140
[  610.287647][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.293573][T16496] 
[  610.295905][T16496] Uninit was stored to memory at:
[  610.301035][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  610.307163][T16496]  __msan_chain_origin+0x54/0xa0
[  610.312211][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.316832][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.321801][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.326783][T16496]  do_syscall_64+0x9f/0x140
[  610.331928][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.338725][T16496] 
[  610.341072][T16496] Uninit was stored to memory at:
[  610.346192][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  610.352225][T16496]  __msan_chain_origin+0x54/0xa0
[  610.357387][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.362242][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.367572][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.372654][T16496]  do_syscall_64+0x9f/0x140
[  610.377459][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.383387][T16496] 
[  610.385719][T16496] Uninit was stored to memory at:
[  610.390980][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  610.396884][T16496]  __msan_chain_origin+0x54/0xa0
[  610.402041][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.406750][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.411715][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.416590][T16496]  do_syscall_64+0x9f/0x140
[  610.421229][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.427238][T16496] 
[  610.429597][T16496] Uninit was stored to memory at:
[  610.434797][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  610.440668][T16496]  __msan_chain_origin+0x54/0xa0
[  610.445714][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.450555][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.455713][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.460595][T16496]  do_syscall_64+0x9f/0x140
[  610.465211][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.471398][T16496] 
[  610.473824][T16496] Uninit was stored to memory at:
[  610.478844][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  610.484702][T16496]  __msan_chain_origin+0x54/0xa0
[  610.489678][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.494304][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.499276][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.504165][T16496]  do_syscall_64+0x9f/0x140
[  610.508792][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.514807][T16496] 
[  610.517282][T16496] Uninit was stored to memory at:
[  610.522316][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  610.528284][T16496]  __msan_chain_origin+0x54/0xa0
[  610.533441][T16496]  do_recvmmsg+0x17fc/0x22d0
[  610.538240][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  610.543588][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  610.548469][T16496]  do_syscall_64+0x9f/0x140
[  610.553103][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  610.559293][T16496] 
[  610.561656][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  610.568861][T16496]  do_recvmmsg+0xbf/0x22d0
[  610.573413][T16496]  do_recvmmsg+0xbf/0x22d0
[  610.896736][T16496] not chained 70000 origins
[  610.901540][T16496] CPU: 0 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  610.910447][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  610.920675][T16496] Call Trace:
[  610.924015][T16496]  dump_stack+0x24c/0x2e0
[  610.928413][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  610.934194][T16496]  ? kmsan_get_metadata+0x116/0x180
[  610.939487][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  610.946512][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  610.952726][T16496]  ? kmsan_get_metadata+0x116/0x180
[  610.957983][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  610.964020][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  610.970398][T16496]  ? kmsan_get_metadata+0x116/0x180
[  610.975655][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  610.981517][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  610.987615][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  610.992934][T16496]  ? _copy_from_user+0x1fd/0x300
[  610.997906][T16496]  ? kmsan_get_metadata+0x116/0x180
[  611.003132][T16496]  __msan_chain_origin+0x54/0xa0
[  611.008235][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.012965][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  611.018808][T16496]  ? __msan_poison_alloca+0xec/0x110
[  611.024417][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  611.030479][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  611.035741][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.040722][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.045598][T16496]  do_syscall_64+0x9f/0x140
[  611.050148][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.056253][T16496] RIP: 0033:0x4665d9
[  611.060175][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  611.079902][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  611.088661][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  611.096970][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  611.105090][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  611.113185][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  611.121306][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  611.129472][T16496] Uninit was stored to memory at:
[  611.134600][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  611.141135][T16496]  __msan_chain_origin+0x54/0xa0
[  611.146194][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.150877][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.155846][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.161095][T16496]  do_syscall_64+0x9f/0x140
[  611.165908][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.172324][T16496] 
[  611.174691][T16496] Uninit was stored to memory at:
[  611.180020][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  611.185980][T16496]  __msan_chain_origin+0x54/0xa0
[  611.191037][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.195755][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.200786][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.206108][T16496]  do_syscall_64+0x9f/0x140
[  611.210743][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.216689][T16496] 
[  611.219197][T16496] Uninit was stored to memory at:
[  611.224329][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  611.230232][T16496]  __msan_chain_origin+0x54/0xa0
[  611.235291][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.240012][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.245073][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.250064][T16496]  do_syscall_64+0x9f/0x140
[  611.254770][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.260815][T16496] 
[  611.263153][T16496] Uninit was stored to memory at:
[  611.268173][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  611.274009][T16496]  __msan_chain_origin+0x54/0xa0
[  611.278969][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.283688][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.288928][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.294016][T16496]  do_syscall_64+0x9f/0x140
[  611.298563][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.304685][T16496] 
[  611.307282][T16496] Uninit was stored to memory at:
[  611.312325][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  611.318088][T16496]  __msan_chain_origin+0x54/0xa0
[  611.323149][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.327910][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.333008][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.338170][T16496]  do_syscall_64+0x9f/0x140
[  611.343055][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.349248][T16496] 
[  611.351903][T16496] Uninit was stored to memory at:
[  611.357320][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  611.363452][T16496]  __msan_chain_origin+0x54/0xa0
[  611.368560][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.373220][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.378195][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.383089][T16496]  do_syscall_64+0x9f/0x140
[  611.387729][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.393768][T16496] 
[  611.396307][T16496] Uninit was stored to memory at:
[  611.401347][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  611.407464][T16496]  __msan_chain_origin+0x54/0xa0
[  611.412771][T16496]  do_recvmmsg+0x17fc/0x22d0
[  611.417802][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  611.422802][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  611.427902][T16496]  do_syscall_64+0x9f/0x140
[  611.432598][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.439040][T16496] 
[  611.441488][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  611.448498][T16496]  do_recvmmsg+0xbf/0x22d0
[  611.453077][T16496]  do_recvmmsg+0xbf/0x22d0
[  611.661047][T16494] not chained 80000 origins
[  611.666224][T16494] CPU: 1 PID: 16494 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  611.675035][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  611.685393][T16494] Call Trace:
[  611.688741][T16494]  dump_stack+0x24c/0x2e0
[  611.693197][T16494]  kmsan_internal_chain_origin+0x6f/0x130
[  611.699093][T16494]  ? kmsan_get_metadata+0x116/0x180
[  611.704356][T16494]  ? kmsan_internal_check_memory+0xb5/0x520
[  611.710517][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  611.716518][T16494]  ? kmsan_get_metadata+0x116/0x180
[  611.721860][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  611.727728][T16494]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  611.734034][T16494]  ? kmsan_get_metadata+0x116/0x180
[  611.739286][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  611.745243][T16494]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  611.751463][T16494]  ? kmsan_unpoison_shadow+0x74/0xa0
[  611.756922][T16494]  ? _copy_from_user+0x1fd/0x300
[  611.762008][T16494]  ? kmsan_get_metadata+0x116/0x180
[  611.767553][T16494]  __msan_chain_origin+0x54/0xa0
[  611.772730][T16494]  do_recvmmsg+0x17fc/0x22d0
[  611.777417][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  611.783366][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  611.789272][T16494]  ? __msan_poison_alloca+0xec/0x110
[  611.795144][T16494]  ? __msan_instrument_asm_store+0x107/0x130
[  611.801285][T16494]  ? __se_sys_recvmmsg+0xd6/0x410
[  611.806469][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  611.811731][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  611.816655][T16494]  do_syscall_64+0x9f/0x140
[  611.821648][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.827854][T16494] RIP: 0033:0x4665d9
[  611.831878][T16494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  611.851895][T16494] RSP: 002b:00007fb2c0e3f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  611.860700][T16494] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  611.868885][T16494] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  611.877257][T16494] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  611.885380][T16494] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c038
[  611.893391][T16494] R13: 0000000000a9fb1f R14: 00007fb2c0e3f300 R15: 0000000000022000
[  611.901700][T16494] Uninit was stored to memory at:
[  611.906852][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  611.912720][T16494]  __msan_chain_origin+0x54/0xa0
[  611.917820][T16494]  do_recvmmsg+0x17fc/0x22d0
[  611.922583][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  611.927682][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  611.932671][T16494]  do_syscall_64+0x9f/0x140
[  611.937248][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.943476][T16494] 
[  611.945849][T16494] Uninit was stored to memory at:
[  611.951082][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  611.956950][T16494]  __msan_chain_origin+0x54/0xa0
[  611.962036][T16494]  do_recvmmsg+0x17fc/0x22d0
[  611.966854][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  611.972005][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  611.977014][T16494]  do_syscall_64+0x9f/0x140
[  611.981560][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  611.987508][T16494] 
[  611.989872][T16494] Uninit was stored to memory at:
[  611.995457][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.001296][T16494]  __msan_chain_origin+0x54/0xa0
[  612.006280][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.011344][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.016316][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.021208][T16494]  do_syscall_64+0x9f/0x140
[  612.025790][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.031818][T16494] 
[  612.034164][T16494] Uninit was stored to memory at:
[  612.039365][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.045485][T16494]  __msan_chain_origin+0x54/0xa0
[  612.050484][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.055202][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.060349][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.065420][T16494]  do_syscall_64+0x9f/0x140
[  612.070052][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.075981][T16494] 
[  612.078319][T16494] Uninit was stored to memory at:
[  612.083532][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.089289][T16494]  __msan_chain_origin+0x54/0xa0
[  612.094271][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.098898][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.103881][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.108885][T16494]  do_syscall_64+0x9f/0x140
[  612.113800][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.119920][T16494] 
[  612.122274][T16494] Uninit was stored to memory at:
[  612.127309][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.133094][T16494]  __msan_chain_origin+0x54/0xa0
[  612.138184][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.142809][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.147893][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.152957][T16494]  do_syscall_64+0x9f/0x140
[  612.157595][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.163645][T16494] 
[  612.166002][T16494] Uninit was stored to memory at:
[  612.171031][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.176794][T16494]  __msan_chain_origin+0x54/0xa0
[  612.181895][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.186530][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.191626][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.196607][T16494]  do_syscall_64+0x9f/0x140
[  612.201168][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.207130][T16494] 
[  612.209569][T16494] Local variable ----msg_sys@do_recvmmsg created at:
[  612.216364][T16494]  do_recvmmsg+0xbf/0x22d0
[  612.220853][T16494]  do_recvmmsg+0xbf/0x22d0
[  612.488158][T16494] not chained 90000 origins
[  612.492938][T16494] CPU: 0 PID: 16494 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  612.502017][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  612.512900][T16494] Call Trace:
[  612.516323][T16494]  dump_stack+0x24c/0x2e0
[  612.521124][T16494]  kmsan_internal_chain_origin+0x6f/0x130
[  612.526947][T16494]  ? kmsan_get_metadata+0x116/0x180
[  612.532333][T16494]  ? kmsan_internal_check_memory+0xb5/0x520
[  612.538500][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  612.544279][T16494]  ? kmsan_get_metadata+0x116/0x180
[  612.549547][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  612.555401][T16494]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  612.561540][T16494]  ? kmsan_get_metadata+0x116/0x180
[  612.566791][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  612.572559][T16494]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  612.578794][T16494]  ? kmsan_unpoison_shadow+0x74/0xa0
[  612.584561][T16494]  ? _copy_from_user+0x1fd/0x300
[  612.589766][T16494]  ? kmsan_get_metadata+0x116/0x180
[  612.595027][T16494]  __msan_chain_origin+0x54/0xa0
[  612.600094][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.604760][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  612.610616][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  612.616528][T16494]  ? __msan_poison_alloca+0xec/0x110
[  612.621959][T16494]  ? __msan_instrument_asm_store+0x107/0x130
[  612.628167][T16494]  ? __se_sys_recvmmsg+0xd6/0x410
[  612.633237][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.638384][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.643298][T16494]  do_syscall_64+0x9f/0x140
[  612.647867][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.653825][T16494] RIP: 0033:0x4665d9
[  612.657984][T16494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  612.678073][T16494] RSP: 002b:00007fb2c0e3f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  612.686774][T16494] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  612.695012][T16494] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  612.703032][T16494] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  612.711152][T16494] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c038
[  612.719213][T16494] R13: 0000000000a9fb1f R14: 00007fb2c0e3f300 R15: 0000000000022000
[  612.727593][T16494] Uninit was stored to memory at:
[  612.732650][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.738490][T16494]  __msan_chain_origin+0x54/0xa0
[  612.743645][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.748368][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.753612][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.758885][T16494]  do_syscall_64+0x9f/0x140
[  612.763529][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.769547][T16494] 
[  612.771884][T16494] Uninit was stored to memory at:
[  612.776993][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.782840][T16494]  __msan_chain_origin+0x54/0xa0
[  612.787823][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.792457][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.797416][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.802319][T16494]  do_syscall_64+0x9f/0x140
[  612.806945][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.813041][T16494] 
[  612.815389][T16494] Uninit was stored to memory at:
[  612.820417][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.826175][T16494]  __msan_chain_origin+0x54/0xa0
[  612.831148][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.836329][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.841339][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.846512][T16494]  do_syscall_64+0x9f/0x140
[  612.851155][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.857099][T16494] 
[  612.859456][T16494] Uninit was stored to memory at:
[  612.864750][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.870517][T16494]  __msan_chain_origin+0x54/0xa0
[  612.875487][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.880198][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.885293][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.890223][T16494]  do_syscall_64+0x9f/0x140
[  612.894979][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.900916][T16494] 
[  612.903262][T16494] Uninit was stored to memory at:
[  612.908394][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.914361][T16494]  __msan_chain_origin+0x54/0xa0
[  612.919339][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.923991][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.928975][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.934320][T16494]  do_syscall_64+0x9f/0x140
[  612.939302][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.945569][T16494] 
[  612.948032][T16494] Uninit was stored to memory at:
[  612.953167][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  612.959120][T16494]  __msan_chain_origin+0x54/0xa0
[  612.964187][T16494]  do_recvmmsg+0x17fc/0x22d0
[  612.969603][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  612.974847][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  612.980000][T16494]  do_syscall_64+0x9f/0x140
[  612.984527][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  612.990555][T16494] 
[  612.992885][T16494] Uninit was stored to memory at:
[  612.998041][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  613.003806][T16494]  __msan_chain_origin+0x54/0xa0
[  613.008912][T16494]  do_recvmmsg+0x17fc/0x22d0
[  613.013674][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  613.018822][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  613.023717][T16494]  do_syscall_64+0x9f/0x140
[  613.028255][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.034279][T16494] 
[  613.036604][T16494] Local variable ----msg_sys@do_recvmmsg created at:
[  613.043275][T16494]  do_recvmmsg+0xbf/0x22d0
[  613.047827][T16494]  do_recvmmsg+0xbf/0x22d0
[  613.100254][T16496] not chained 100000 origins
[  613.105184][T16496] CPU: 0 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  613.114055][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  613.124576][T16496] Call Trace:
[  613.128132][T16496]  dump_stack+0x24c/0x2e0
[  613.132765][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  613.138519][T16496]  ? kmsan_get_metadata+0x116/0x180
[  613.143758][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  613.149776][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  613.155612][T16496]  ? kmsan_get_metadata+0x116/0x180
[  613.161191][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  613.167038][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  613.173254][T16496]  ? kmsan_get_metadata+0x116/0x180
[  613.178484][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  613.184210][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  613.190476][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  613.196239][T16496]  ? _copy_from_user+0x1fd/0x300
[  613.201200][T16496]  ? kmsan_get_metadata+0x116/0x180
[  613.206420][T16496]  __msan_chain_origin+0x54/0xa0
[  613.211472][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.216238][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  613.221981][T16496]  ? __msan_poison_alloca+0xec/0x110
[  613.227383][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  613.233663][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  613.238714][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.243771][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.249079][T16496]  do_syscall_64+0x9f/0x140
[  613.253614][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.259605][T16496] RIP: 0033:0x4665d9
[  613.263628][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  613.283748][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  613.292934][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  613.301323][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  613.309589][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  613.318173][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  613.326281][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  613.334662][T16496] Uninit was stored to memory at:
[  613.339886][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  613.345638][T16496]  __msan_chain_origin+0x54/0xa0
[  613.350932][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.355989][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.361077][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.366687][T16496]  do_syscall_64+0x9f/0x140
[  613.371228][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.377446][T16496] 
[  613.379820][T16496] Uninit was stored to memory at:
[  613.385708][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  613.391593][T16496]  __msan_chain_origin+0x54/0xa0
[  613.396745][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.401359][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.407380][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.412459][T16496]  do_syscall_64+0x9f/0x140
[  613.417162][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.423474][T16496] 
[  613.425804][T16496] Uninit was stored to memory at:
[  613.430912][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  613.437011][T16496]  __msan_chain_origin+0x54/0xa0
[  613.441978][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.446958][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.451916][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.456873][T16496]  do_syscall_64+0x9f/0x140
[  613.461427][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.467781][T16496] 
[  613.470137][T16496] Uninit was stored to memory at:
[  613.475157][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  613.481076][T16496]  __msan_chain_origin+0x54/0xa0
[  613.486485][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.491459][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.497198][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.502261][T16496]  do_syscall_64+0x9f/0x140
[  613.506883][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.512894][T16496] 
[  613.515217][T16496] Uninit was stored to memory at:
[  613.520234][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  613.526173][T16496]  __msan_chain_origin+0x54/0xa0
[  613.531353][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.535969][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.541054][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.545929][T16496]  do_syscall_64+0x9f/0x140
[  613.550562][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.556674][T16496] 
[  613.559017][T16496] Uninit was stored to memory at:
[  613.564227][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  613.570145][T16496]  __msan_chain_origin+0x54/0xa0
[  613.575107][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.579802][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.585223][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.590154][T16496]  do_syscall_64+0x9f/0x140
[  613.594698][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.601026][T16496] 
[  613.603463][T16496] Uninit was stored to memory at:
[  613.608652][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  613.614391][T16496]  __msan_chain_origin+0x54/0xa0
[  613.619367][T16496]  do_recvmmsg+0x17fc/0x22d0
[  613.624158][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  613.629121][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  613.633997][T16496]  do_syscall_64+0x9f/0x140
[  613.638528][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  613.644653][T16496] 
[  613.647090][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  613.653770][T16496]  do_recvmmsg+0xbf/0x22d0
[  613.658317][T16496]  do_recvmmsg+0xbf/0x22d0
[  613.861439][T16494] not chained 110000 origins
[  613.866379][T16494] CPU: 1 PID: 16494 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  613.875716][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  613.886513][T16494] Call Trace:
[  613.889820][T16494]  dump_stack+0x24c/0x2e0
[  613.894302][T16494]  kmsan_internal_chain_origin+0x6f/0x130
[  613.900148][T16494]  ? kmsan_get_metadata+0x116/0x180
[  613.905384][T16494]  ? kmsan_internal_check_memory+0xb5/0x520
[  613.911308][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  613.916977][T16494]  ? kmsan_get_metadata+0x116/0x180
[  613.922202][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  613.928063][T16494]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  613.934162][T16494]  ? kmsan_get_metadata+0x116/0x180
[  613.939386][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  613.945394][T16494]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  613.951515][T16494]  ? kmsan_unpoison_shadow+0x74/0xa0
[  613.956843][T16494]  ? _copy_from_user+0x1fd/0x300
[  613.961815][T16494]  ? kmsan_get_metadata+0x116/0x180
[  613.967378][T16494]  __msan_chain_origin+0x54/0xa0
[  613.972427][T16494]  do_recvmmsg+0x17fc/0x22d0
[  613.977164][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  613.983114][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  613.988856][T16494]  ? __msan_poison_alloca+0xec/0x110
[  613.994166][T16494]  ? __msan_instrument_asm_store+0x107/0x130
[  614.000178][T16494]  ? __se_sys_recvmmsg+0xd6/0x410
[  614.005258][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.010240][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.015214][T16494]  do_syscall_64+0x9f/0x140
[  614.019756][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.026022][T16494] RIP: 0033:0x4665d9
[  614.029933][T16494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  614.050058][T16494] RSP: 002b:00007fb2c0e3f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  614.058546][T16494] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  614.066950][T16494] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  614.075313][T16494] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  614.083491][T16494] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c038
[  614.091584][T16494] R13: 0000000000a9fb1f R14: 00007fb2c0e3f300 R15: 0000000000022000
[  614.099948][T16494] Uninit was stored to memory at:
[  614.105006][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  614.111935][T16494]  __msan_chain_origin+0x54/0xa0
[  614.116937][T16494]  do_recvmmsg+0x17fc/0x22d0
[  614.121568][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.126657][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.131649][T16494]  do_syscall_64+0x9f/0x140
[  614.136276][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.142204][T16494] 
[  614.144536][T16494] Uninit was stored to memory at:
[  614.149610][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  614.155372][T16494]  __msan_chain_origin+0x54/0xa0
[  614.160438][T16494]  do_recvmmsg+0x17fc/0x22d0
[  614.165854][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.171305][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.176520][T16494]  do_syscall_64+0x9f/0x140
[  614.181123][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.187236][T16494] 
[  614.189570][T16494] Uninit was stored to memory at:
[  614.194701][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  614.200455][T16494]  __msan_chain_origin+0x54/0xa0
[  614.205540][T16494]  do_recvmmsg+0x17fc/0x22d0
[  614.210237][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.215849][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.220746][T16494]  do_syscall_64+0x9f/0x140
[  614.225389][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.231497][T16494] 
[  614.233831][T16494] Uninit was stored to memory at:
[  614.239038][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  614.244880][T16494]  __msan_chain_origin+0x54/0xa0
[  614.249930][T16494]  do_recvmmsg+0x17fc/0x22d0
[  614.254570][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.259640][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.264517][T16494]  do_syscall_64+0x9f/0x140
[  614.269136][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.276796][T16494] 
[  614.279589][T16494] Uninit was stored to memory at:
[  614.284731][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  614.290678][T16494]  __msan_chain_origin+0x54/0xa0
[  614.295913][T16494]  do_recvmmsg+0x17fc/0x22d0
[  614.300753][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.305743][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.310766][T16494]  do_syscall_64+0x9f/0x140
[  614.315308][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.321229][T16494] 
[  614.323571][T16494] Uninit was stored to memory at:
[  614.328778][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  614.334804][T16494]  __msan_chain_origin+0x54/0xa0
[  614.339770][T16494]  do_recvmmsg+0x17fc/0x22d0
[  614.344385][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.349430][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.354564][T16494]  do_syscall_64+0x9f/0x140
[  614.359190][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.365347][T16494] 
[  614.367780][T16494] Uninit was stored to memory at:
[  614.373067][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  614.378836][T16494]  __msan_chain_origin+0x54/0xa0
[  614.384004][T16494]  do_recvmmsg+0x17fc/0x22d0
[  614.390021][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  614.395957][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  614.401336][T16494]  do_syscall_64+0x9f/0x140
[  614.405966][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.412091][T16494] 
[  614.414429][T16494] Local variable ----msg_sys@do_recvmmsg created at:
[  614.421196][T16494]  do_recvmmsg+0xbf/0x22d0
[  614.425749][T16494]  do_recvmmsg+0xbf/0x22d0
[  614.636010][T16496] not chained 120000 origins
[  614.640775][T16496] CPU: 0 PID: 16496 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  614.649766][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  614.660149][T16496] Call Trace:
[  614.663484][T16496]  dump_stack+0x24c/0x2e0
[  614.667992][T16496]  kmsan_internal_chain_origin+0x6f/0x130
[  614.674048][T16496]  ? kmsan_get_metadata+0x116/0x180
[  614.679380][T16496]  ? kmsan_internal_check_memory+0xb5/0x520
[  614.685931][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  614.698559][T16496]  ? kmsan_get_metadata+0x116/0x180
[  614.703804][T16496]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  614.709779][T16496]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  614.715970][T16496]  ? kmsan_get_metadata+0x116/0x180
[  614.721396][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  614.727071][T16496]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  614.733293][T16496]  ? kmsan_unpoison_shadow+0x74/0xa0
[  614.738831][T16496]  ? _copy_from_user+0x1fd/0x300
[  614.743816][T16496]  ? kmsan_get_metadata+0x116/0x180
[  614.749142][T16496]  __msan_chain_origin+0x54/0xa0
[  614.754238][T16496]  do_recvmmsg+0x17fc/0x22d0
[  614.758907][T16496]  ? kmsan_internal_set_origin+0x85/0xc0
[  614.764576][T16496]  ? __msan_poison_alloca+0xec/0x110
[  614.769997][T16496]  ? __msan_instrument_asm_store+0x107/0x130
[  614.776014][T16496]  ? __se_sys_recvmmsg+0xd6/0x410
[  614.781450][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  614.786822][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  614.792068][T16496]  do_syscall_64+0x9f/0x140
[  614.796617][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.802568][T16496] RIP: 0033:0x4665d9
[  614.806498][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  614.826585][T16496] RSP: 002b:00007fb2c0e1e188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  614.835412][T16496] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
[  614.843541][T16496] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  614.852008][T16496] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  614.860259][T16496] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c0f0
[  614.868444][T16496] R13: 0000000000a9fb1f R14: 00007fb2c0e1e300 R15: 0000000000022000
[  614.876748][T16496] Uninit was stored to memory at:
[  614.882059][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  614.888000][T16496]  __msan_chain_origin+0x54/0xa0
[  614.893068][T16496]  do_recvmmsg+0x17fc/0x22d0
[  614.897797][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  614.902782][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  614.907664][T16496]  do_syscall_64+0x9f/0x140
[  614.913882][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.920180][T16496] 
[  614.922568][T16496] Uninit was stored to memory at:
[  614.927687][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  614.933796][T16496]  __msan_chain_origin+0x54/0xa0
[  614.938771][T16496]  do_recvmmsg+0x17fc/0x22d0
[  614.943530][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  614.948685][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  614.954062][T16496]  do_syscall_64+0x9f/0x140
[  614.958602][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  614.964593][T16496] 
[  614.966945][T16496] Uninit was stored to memory at:
[  614.972013][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  614.977863][T16496]  __msan_chain_origin+0x54/0xa0
[  614.982841][T16496]  do_recvmmsg+0x17fc/0x22d0
[  614.987783][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  614.992889][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  614.997960][T16496]  do_syscall_64+0x9f/0x140
[  615.002580][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.008602][T16496] 
[  615.011061][T16496] Uninit was stored to memory at:
[  615.016258][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  615.021996][T16496]  __msan_chain_origin+0x54/0xa0
[  615.027226][T16496]  do_recvmmsg+0x17fc/0x22d0
[  615.032027][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  615.037108][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  615.042075][T16496]  do_syscall_64+0x9f/0x140
[  615.046617][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.052761][T16496] 
[  615.055107][T16496] Uninit was stored to memory at:
[  615.060310][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  615.066254][T16496]  __msan_chain_origin+0x54/0xa0
[  615.071492][T16496]  do_recvmmsg+0x17fc/0x22d0
[  615.076178][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  615.081500][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  615.086570][T16496]  do_syscall_64+0x9f/0x140
[  615.091136][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.097249][T16496] 
[  615.099694][T16496] Uninit was stored to memory at:
[  615.104731][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  615.110603][T16496]  __msan_chain_origin+0x54/0xa0
[  615.115668][T16496]  do_recvmmsg+0x17fc/0x22d0
[  615.120484][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  615.125779][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  615.130690][T16496]  do_syscall_64+0x9f/0x140
[  615.135245][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.141526][T16496] 
[  615.143868][T16496] Uninit was stored to memory at:
[  615.149082][T16496]  kmsan_internal_chain_origin+0xad/0x130
[  615.154934][T16496]  __msan_chain_origin+0x54/0xa0
[  615.160109][T16496]  do_recvmmsg+0x17fc/0x22d0
[  615.164745][T16496]  __se_sys_recvmmsg+0x24a/0x410
[  615.169805][T16496]  __x64_sys_recvmmsg+0x62/0x80
[  615.174839][T16496]  do_syscall_64+0x9f/0x140
[  615.179478][T16496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.185511][T16496] 
[  615.187945][T16496] Local variable ----msg_sys@do_recvmmsg created at:
[  615.194910][T16496]  do_recvmmsg+0xbf/0x22d0
[  615.199481][T16496]  do_recvmmsg+0xbf/0x22d0
[  615.425050][T16494] not chained 130000 origins
[  615.429703][T16494] CPU: 1 PID: 16494 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0
[  615.439015][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  615.449466][T16494] Call Trace:
[  615.453480][T16494]  dump_stack+0x24c/0x2e0
[  615.458002][T16494]  kmsan_internal_chain_origin+0x6f/0x130
[  615.463828][T16494]  ? kmsan_get_metadata+0x116/0x180
[  615.469264][T16494]  ? kmsan_internal_check_memory+0xb5/0x520
[  615.475377][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  615.481110][T16494]  ? kmsan_get_metadata+0x116/0x180
[  615.486438][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  615.492450][T16494]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  615.498963][T16494]  ? kmsan_get_metadata+0x116/0x180
[  615.504342][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  615.510196][T16494]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  615.516849][T16494]  ? kmsan_unpoison_shadow+0x74/0xa0
[  615.522427][T16494]  ? _copy_from_user+0x1fd/0x300
[  615.527667][T16494]  ? kmsan_get_metadata+0x116/0x180
[  615.532936][T16494]  __msan_chain_origin+0x54/0xa0
[  615.537992][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.542961][T16494]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  615.548854][T16494]  ? kmsan_internal_set_origin+0x85/0xc0
[  615.554509][T16494]  ? __msan_poison_alloca+0xec/0x110
[  615.559923][T16494]  ? __msan_instrument_asm_store+0x107/0x130
[  615.565998][T16494]  ? __se_sys_recvmmsg+0xd6/0x410
[  615.571154][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.576276][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.581235][T16494]  do_syscall_64+0x9f/0x140
[  615.585767][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.591946][T16494] RIP: 0033:0x4665d9
[  615.595949][T16494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  615.615743][T16494] RSP: 002b:00007fb2c0e3f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  615.624554][T16494] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  615.632582][T16494] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003
[  615.641294][T16494] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
[  615.649718][T16494] R10: 0000000000000002 R11: 0000000000000246 R12: 000000000056c038
[  615.657796][T16494] R13: 0000000000a9fb1f R14: 00007fb2c0e3f300 R15: 0000000000022000
[  615.665877][T16494] Uninit was stored to memory at:
[  615.671033][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  615.676779][T16494]  __msan_chain_origin+0x54/0xa0
[  615.681723][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.686404][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.691379][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.696743][T16494]  do_syscall_64+0x9f/0x140
[  615.701255][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.707316][T16494] 
[  615.709727][T16494] Uninit was stored to memory at:
[  615.714748][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  615.720825][T16494]  __msan_chain_origin+0x54/0xa0
[  615.725885][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.730590][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.735976][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.741231][T16494]  do_syscall_64+0x9f/0x140
[  615.745736][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.751658][T16494] 
[  615.754294][T16494] Uninit was stored to memory at:
[  615.759320][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  615.765065][T16494]  __msan_chain_origin+0x54/0xa0
[  615.770191][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.774816][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.779782][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.784637][T16494]  do_syscall_64+0x9f/0x140
[  615.789171][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.795298][T16494] 
[  615.797724][T16494] Uninit was stored to memory at:
[  615.802818][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  615.809192][T16494]  __msan_chain_origin+0x54/0xa0
[  615.814151][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.819100][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.824138][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.829610][T16494]  do_syscall_64+0x9f/0x140
[  615.834672][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.840570][T16494] 
[  615.842893][T16494] Uninit was stored to memory at:
[  615.848110][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  615.853836][T16494]  __msan_chain_origin+0x54/0xa0
[  615.858893][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.863680][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.868918][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.873981][T16494]  do_syscall_64+0x9f/0x140
[  615.878801][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.884929][T16494] 
[  615.887482][T16494] Uninit was stored to memory at:
[  615.892522][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  615.898303][T16494]  __msan_chain_origin+0x54/0xa0
[  615.903322][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.909448][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.914402][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.920377][T16494]  do_syscall_64+0x9f/0x140
[  615.924979][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.930996][T16494] 
[  615.933320][T16494] Uninit was stored to memory at:
[  615.938520][T16494]  kmsan_internal_chain_origin+0xad/0x130
[  615.944252][T16494]  __msan_chain_origin+0x54/0xa0
[  615.950660][T16494]  do_recvmmsg+0x17fc/0x22d0
[  615.955362][T16494]  __se_sys_recvmmsg+0x24a/0x410
[  615.962301][T16494]  __x64_sys_recvmmsg+0x62/0x80
[  615.967345][T16494]  do_syscall_64+0x9f/0x140
[  615.972483][T16494]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  615.979114][T16494] 
[  615.981991][T16494] Local variable ----msg_sys@do_recvmmsg created at:
[  615.989096][T16494]  do_recvmmsg+0xbf/0x22d0
[  615.993864][T16494]  do_recvmmsg+0xbf/0x22d0
07:27:55 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x8915, &(0x7f00000001c0))

07:27:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000005008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:55 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000140))

07:27:55 executing program 4:
unshare(0x4020400)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

07:27:55 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c9aa21d9"}, 0x0, 0x0, @fd})

07:27:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x4}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  616.407094][T16547] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:55 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x3a)

[  616.477920][T16549] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:55 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x5450, 0x0)

07:27:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa4}, 0x1, 0x0, 0x4c}, 0x0)

07:27:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x5}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:55 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@generic)

07:27:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000006008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:56 executing program 2:
r0 = syz_io_uring_setup(0x1724, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x3, 0x0, 0x1)

[  617.055592][T16564] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:56 executing program 5:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)

[  617.132106][T16567] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:56 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4"], 0x33fe0}}, 0x0)

07:27:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x6}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000007008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:56 executing program 1:
mknodat$null(0xffffffffffffffff, 0x0, 0x7488, 0x103)

07:27:56 executing program 5:
syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x840)

07:27:56 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f0000000200)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

07:27:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x7}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  617.820003][T16582] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  617.904154][T16584] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:57 executing program 4:
getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480))

07:27:57 executing program 1:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xd8140, 0x0)

07:27:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000008008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:57 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xe}, 0x40)

07:27:57 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6}]})
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0)

07:27:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x8}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:57 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

[  618.602522][T16599] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:57 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x0, 0x1, [{}]})

[  618.668610][T16602] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  618.748569][   T35] audit: type=1326 audit(1624001277.734:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16603 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
07:27:58 executing program 5:
socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000))

07:27:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000009008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x9}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:58 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:27:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0)

[  619.333349][T16616] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  619.390819][T16619] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:27:58 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0)

[  619.598004][   T35] audit: type=1326 audit(1624001278.584:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16603 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
07:27:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000a008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0xc}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:58 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000004380)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

07:27:58 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:27:59 executing program 1:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)

07:27:59 executing program 5:
r0 = syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x101002)
write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18}, 0x18)

07:27:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000b008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:27:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0xf}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:27:59 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

07:27:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:27:59 executing program 5:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x24003, 0x0)

07:27:59 executing program 1:
bpf$MAP_UPDATE_ELEM(0x23, &(0x7f0000001c00)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)

07:27:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000c008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x60}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:00 executing program 4:
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:00 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x18}, 0x40)

07:28:00 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$FS_IOC_SETFLAGS(r0, 0x8953, &(0x7f0000000000))

07:28:00 executing program 5:
r0 = syz_io_uring_setup(0x1724, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x2)

07:28:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x93}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:00 executing program 4:
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:00 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000d008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:00 executing program 2:
getresuid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0))
getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6, 0x7f, 0x80, 0x7}]})

07:28:00 executing program 1:
socket$packet(0x11, 0xb7fa6d4688a6cf46, 0x300)

07:28:01 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$FS_IOC_SETFLAGS(r0, 0x89a1, &(0x7f0000000000))

[  622.059725][T16685] validate_nla: 6 callbacks suppressed
[  622.059793][T16685] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  622.094425][   T35] audit: type=1326 audit(1624001281.074:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16683 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
[  622.149224][T16687] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:01 executing program 4:
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  622.245411][   T35] audit: type=1326 audit(1624001281.184:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16683 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0
07:28:01 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000000e008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:01 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000000))

07:28:01 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

07:28:01 executing program 5:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x40086602, &(0x7f0000000040))

07:28:01 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

[  622.873527][T16705] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  622.947064][T16708] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:02 executing program 1:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
ioctl$CAPI_GET_FLAGS(r0, 0x80044323, 0x0)

[  623.144167][ T8878] usb 3-1: new high-speed USB device number 4 using dummy_hcd
07:28:02 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:02 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xf4240, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  623.384303][ T8878] usb 3-1: Using ep0 maxpacket: 32
07:28:02 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

[  623.503528][ T8878] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
07:28:02 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000100)=0x16950000)

[  623.611414][T16722] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  623.680512][T16723] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  623.694359][ T8878] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  623.703832][ T8878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.712231][ T8878] usb 3-1: Product: syz
[  623.716777][ T8878] usb 3-1: Manufacturer: syz
[  623.721628][ T8878] usb 3-1: SerialNumber: syz
07:28:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  623.748764][T16723] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:02 executing program 5:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)

07:28:03 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000012008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:03 executing program 2:
r0 = openat$full(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read$eventfd(r0, &(0x7f0000000240), 0xffffffd7)

07:28:03 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:03 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x511001, 0x0)

[  624.390455][    T5] usb 3-1: USB disconnect, device number 4
07:28:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x4}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  624.455023][T16740] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  624.502578][T16740] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  624.581495][T16748] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  624.643456][ T8878] usb 6-1: new high-speed USB device number 5 using dummy_hcd
07:28:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240))

07:28:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0)

[  624.883580][ T8878] usb 6-1: Using ep0 maxpacket: 8
07:28:03 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000029008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  625.008495][ T8878] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.020894][ T8878] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  625.031887][ T8878] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  625.042550][ T8878] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  625.052958][ T8878] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  625.062810][ T8878] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
07:28:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  625.319245][T16760] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'.
07:28:04 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]})

[  625.495522][ T8878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  625.505522][ T8878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.516711][ T8878] usb 6-1: Product: syz
[  625.521277][ T8878] usb 6-1: Manufacturer: syz
[  625.526635][ T8878] usb 6-1: SerialNumber: syz
07:28:04 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0)

07:28:05 executing program 5:
r0 = syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x101002)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe}, 0x18)

07:28:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000073008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:05 executing program 1:
syz_io_uring_setup(0x1724, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

07:28:05 executing program 2:
bpf$MAP_UPDATE_ELEM(0x8, &(0x7f0000001c00)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)

07:28:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0)

[  626.243121][ T8878] cdc_ncm 6-1:1.0: bind() failure
[  626.325360][ T8878] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  626.332628][ T8878] cdc_ncm 6-1:1.1: bind() failure
[  626.418504][ T8878] usb 6-1: USB disconnect, device number 5
07:28:05 executing program 1:
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

07:28:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:05 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010028188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:05 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x81}, 0x10)

07:28:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

[  627.142461][T16802] validate_nla: 4 callbacks suppressed
[  627.142531][T16802] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  627.230289][T16804] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:06 executing program 5:
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec800000000e00000026000000e3bdeefb44004f000e000a0010000b2fd6130f97d80a0313", 0x30}], 0x1}, 0x0)

07:28:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x8}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:06 executing program 1:
r0 = syz_io_uring_setup(0x1724, &(0x7f0000000100), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x9, &(0x7f0000000200), 0x1)

07:28:06 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8181)

07:28:06 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010038188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  627.805020][T16813] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
07:28:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

07:28:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x9}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:07 executing program 2:
syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3f, 0x0, 0x5, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

07:28:07 executing program 1:
r0 = getpgrp(0xffffffffffffffff)
process_vm_writev(r0, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[{&(0x7f0000001280)=""/214, 0xd6}, {&(0x7f0000001c40)=""/4096, 0x1000}, {0x0}], 0x3, 0x0)

[  628.491314][T16813] team0: Port device team_slave_0 removed
07:28:07 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

07:28:07 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100))

[  628.939061][T16819] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  628.948428][T16834] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:08 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x87, &(0x7f00000000c0)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  629.212400][ T8456] usb 3-1: new high-speed USB device number 5 using dummy_hcd
07:28:08 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

07:28:08 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010048188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0xc}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  629.453337][ T8456] usb 3-1: Using ep0 maxpacket: 32
[  629.575317][ T8456] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  629.584904][ T8456] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  629.595989][ T8456] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
07:28:08 executing program 5:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$khugepaged_scan(r0, 0x0, 0xf0ffffff7f0000)

[  629.755844][T16844] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  629.841442][T16847] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  629.914413][ T8456] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  629.926450][ T8456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.935411][ T8456] usb 3-1: Product: syz
[  629.939853][ T8456] usb 3-1: Manufacturer: syz
[  629.944886][ T8456] usb 3-1: SerialNumber: syz
07:28:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="49b89b578f0be44e61b3a127d46ccfba75", 0x11}], 0x1}], 0x1, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ec0)=""/4096, 0x2f}], 0x1}, 0x0)

07:28:09 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

07:28:09 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010058188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:09 executing program 2:
r0 = getpgid(0x0)
r1 = fork()
kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

07:28:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0xf}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:09 executing program 5:
select(0x0, 0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)={0x0, 0xea60})

[  630.715990][T16864] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  630.753642][ T8456] usb 3-1: 0:2 : does not exist
[  630.821852][T16870] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  630.850161][ T8456] usb 3-1: USB disconnect, device number 5
07:28:09 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

07:28:10 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010068188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x60}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:10 executing program 2:
io_uring_setup(0x7b2f, &(0x7f000000c0c0)={0x0, 0x0, 0x4})

07:28:10 executing program 5:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)

07:28:10 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000100)="04", 0x1, 0x0, &(0x7f0000000180)=@abs, 0x6e)

07:28:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

[  631.775216][T16900] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:11 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010078188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x93}, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:11 executing program 5:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x282, 0x0)

07:28:11 executing program 1:
syz_io_uring_setup(0x28e2, &(0x7f00000026c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002740), 0x0)
syz_io_uring_setup(0x35f5, &(0x7f00000027c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002840), &(0x7f0000002880))

07:28:11 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'})

07:28:11 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

[  632.496713][T16918] validate_nla: 1 callbacks suppressed
[  632.496780][T16918] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  632.588188][T16921] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  632.731345][ T3129] ieee802154 phy0 wpan0: encryption failed: -22
[  632.738131][ T3129] ieee802154 phy1 wpan1: encryption failed: -22
07:28:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x4}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010088188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:12 executing program 5:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x0)

07:28:12 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x0, 0x0, [], 0x0})

07:28:12 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f000000c640)={0x2020}, 0x2020)

[  633.321851][T16937] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  633.395239][T16943] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x7}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:12 executing program 1:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000)

07:28:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

07:28:12 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, 0x0, &(0x7f0000000000))

07:28:12 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010098188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  634.049283][T16955] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x3b}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  634.108728][T16956] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:13 executing program 1:
io_uring_setup(0x800494c, &(0x7f0000000000))

07:28:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

07:28:13 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)=ANY=[], 0x190)

07:28:13 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100a8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400e9"], 0x14}}, 0x0)

[  634.828546][T16969] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

[  634.900872][T16971] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:13 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0x40049409, 0x0)

07:28:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x50}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:14 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, 0x0, 0x0)

07:28:14 executing program 2:
add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0xfffff, 0x0)

07:28:14 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100b8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:14 executing program 5:
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0)

07:28:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4}]}, 0x28}}, 0x0)

[  635.702360][T16986] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1498"], 0x14}}, 0x0)

07:28:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x3b}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  635.798150][T16987] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:14 executing program 2:
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)='G', 0x1, 0xffffffffffffffff)

07:28:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100c8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

07:28:15 executing program 1:
r0 = memfd_create(&(0x7f0000000000)='(\'{!n\\(\\\\,\x00', 0x5)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

07:28:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4}]}, 0x28}}, 0x0)

07:28:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x3b}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:15 executing program 2:
openat$mice(0xffffffffffffff9c, &(0x7f00000007c0), 0x0)

07:28:15 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100d8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:15 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[@rights={{0x10}}], 0x10}, 0x0)

07:28:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4}]}, 0x28}}, 0x0)

07:28:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:16 executing program 1:
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)

07:28:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000280), 0x10)

07:28:16 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100e8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:16 executing program 5:
add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)={0x10}, 0x10)

07:28:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0)

07:28:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0)

07:28:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x2}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:16 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xbff24516f6998994, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  637.728694][T17031] validate_nla: 4 callbacks suppressed
[  637.728763][T17031] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  637.842085][T17034] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:17 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0)

07:28:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100f8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0)

07:28:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={0x0}}, 0x0)

07:28:17 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)

07:28:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x3}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  638.516500][T17050] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  638.583360][T17052] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:17 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0xee00, 0x0)

07:28:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0)

07:28:17 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010108188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:18 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@getpolicy={0x50, 0x15, 0x4121982d9c9f5f8d, 0x0, 0x0, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x50}}, 0x0)

07:28:18 executing program 2:
add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$assume_authority(0x10, 0x0)

07:28:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x4}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  639.251959][T17065] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:18 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map, @generic={0x0, 0x0, 0x0, 0x5, 0x10001}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x2a, &(0x7f0000000700)=""/42, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  639.331134][T17069] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0)

07:28:18 executing program 2:
openat$mice(0xffffffffffffff9c, 0x0, 0x400000)

07:28:18 executing program 1:
r0 = socket(0x11, 0x3, 0x0)
getsockname(r0, 0x0, &(0x7f0000000280))

07:28:18 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010118188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x5}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x5ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x31, 0x80, [@cf={0x4, 0x6}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7}, @dsss={0x3, 0x1}, @erp={0x2a, 0x1}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1}, @ssid={0x0, 0x1, @random='r'}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x56, 0x80, [@mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1}, @ht={0x2d, 0x1a}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x0, @device_b, 0x0, "", 0x0, 0x0, @broadcast}}, @ibss={0x6, 0x2}, @chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x13d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x301, 0xe, {@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0x35, {0x0, 0x0, 0x0, "15f57872242865dbe64896926c0af1e8e10fd7df1666f677407849d90e77c0a088eeffd28d2c9e401c5cfd079b8525606b4e"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0xfb, "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"}, {0xdd, 0x6e, "45bb1b31179eabdc0f5228dca0ebb965d322c25dcf22fd91eb37c8141e39143bb9c1caa66dbe24836d5fb40c60c42e6f4e43bdcba1ad91352d747b6f9b5f7d959b9c0f03a0b7f0ab10c655beb62c8840f487d6de7ea6692bb3f1d7bfccb841b302a3016c52037f1e71206ae354c1"}, {0xdd, 0x36, "5dfc348d4ebe00917503a0c4ab33e4114b94d8a7a0a62b8b87a9d3fd14ab80fcfe538bd1ac2b8c57599eba62f9c2bd4cc4617c27fc63"}, {0xdd, 0xe3, "fe64e6fa909a237f924095279733560e6e6e62b38685c7264e2da37de4b2bf9af2c54e59203ff36f364cd0402bfefd3fb3403f80a7b0ced748e4dcc495b15ae89db6e56e33be223be7202f087e3daf4a3dd73fc62b7481b910def186136fb27f75b0e71ea33f59e50501dbf1620252dc3d5d37e97e10d6f56bfa47210b8d9fffb102630938b98068c5c4ec0dd34b25cd30efcc6fd536dad2d72dafdc55a034d2c44587a3638e1e4ee61b6ad7af46e0cca960318775e0ba26b8c1bb46f11671d59d11989966a93e52703a7d2773cc679adb86785aa3ada4bf2d3ab72d5bf9adc41f81e2"}]}}, @NL80211_ATTR_BEACON_TAIL={0xc5, 0xf, [@perr={0x84, 0x89, {0x0, 0x9, [@not_ext={{}, @broadcast}, @not_ext, @ext={{}, @device_b}, @not_ext, @not_ext={{}, @broadcast}, @ext={{}, @device_b}, @not_ext={{}, @broadcast}, @not_ext, @ext={{}, @device_b}]}}, @ht={0x2d, 0x1a}, @mic={0x8c, 0x18, {0x0, "add4206a08f8", @long="e02b1ba63b4aa7c9f1f0618acfe74862"}}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@mesh_chsw={0x76, 0x6}]}]]}, @NL80211_ATTR_CSA_IES={0x8c8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @beacon_params=[@NL80211_ATTR_IE={0x139, 0x2a, [@mesh_chsw={0x76, 0x6}, @link_id={0x65, 0x12, {@random="5f506e7f7160", @device_a, @device_b}}, @ibss={0x6, 0x2}, @fast_bss_trans={0x37, 0x113, {0x0, 0x8, "1e6c0827703d11ac9cdd0589a6d721bd", "2f9e115e1896e66db7791562307210fa203dc7d1a2a79d4a90c9cfdebfb55f9c", "80f220ae2699c1f34994ca2a4b6ad84521c09111dd09a0d60a95b95846f4ee51", [{0x0, 0x17, "9ad667e033c9fac33e6e78caa9ef4677dcff3c4dc68466"}, {0x0, 0xa, "0b73ab20dea4c3c88f3a"}, {0x0, 0x19, "44eefab8e261212e2d41dea40072dc0442653e9c75901e1df5"}, {0x0, 0x17, "cedfb35f10ad931e9db412fe1a40c86659d2443ebdae9f"}, {0x0, 0x11, "27eaa01d61a81ba893f22f8bc6aaf9a814"}, {0x0, 0x1f, "562121f8b17b921323eda57a32019de3bf230b704bc75d383f7f3c1d7ae375"}, {0x0, 0x18, "ffc9485e88bc8d64b2325a3aa2fd9dfe0f7da1bddc1aa571"}, {0x0, 0x18, "7a28fbebc166b74ade5f8e832d26c8fd5c379fcc8a10ad79"}]}}]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0xb1, 0xe, {@wo_ht={{}, {}, @device_b, @broadcast}, 0x0, @random, 0x0, @void, @val={0x1, 0x3, [{}, {}, {}]}, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @void, [{0xdd, 0x56, "fc69fdcc97ab9e64d9a9f914a45531e8cf3600d59426ce1b58fe3ddab2f4a4e8d3704113d2a641eaf9057fa088d371006760830d3f4845da91edcfff95b2b741ba773c911884a8f9d861204b21df077e57a63daa4a5c"}]}}, @NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@ibss={0x6, 0x2}, @supported_rates={0x1, 0x3, [{}, {}, {}]}]}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ext_channel_switch={0x3c, 0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x22d, 0xe, {@with_ht={{{}, {}, @device_b, @device_a, @from_mac}}, 0x0, @random, 0x0, @val={0x0, 0xf, @random="dd94ef177ae0bbcb3f6526ff23756e"}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x5, 0xdc, {0x0, 0x0, 0x0, "91e7ee34da5456a9bf0d9e2e2d4ff8b060d20ed7eda8d9b20481c5055dfa5fd4b9530717f098e6ac3ab7e930ae8a2c9c54fd725dab53eb5bc8bf636fd37845caaf26fbdf0d67674794c9b81c49cb5c82390ed33dae69c0a2f78f43e57063ba9b04e275e72d002aab613bb4ffdfbbbbb362c39517eafb4c0555101938169c91e583fcd5cc2217dd8ebf8b0cec33f5e6ee8a61b4acc80a95724c184d728865282e0afaba706a2abd11dafe93e8c2add19104233c31e3e7c7ae9e670b50b5c6ac8d61be60699f7f0788ceb43b3d6e7729b3d72d30a2a27d4366b6"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x40, "453bd07f80a087cb34a4b95d2cb98af759eefe963f2ab9440dbca34e60ff234f25bcde8b8f2578f4f1ba989e5258a59e354ca534d025ed7de932d0c765dcfa34"}, {0xdd, 0xa5, "74a359a4a09f689bf711d6ee28d022ad3a322ac9cd902faf9216d01bb37dfb20db94114ef152f79eb98b36435f72a4e98210bba554b6b9e0bb071d1018d5dea84979b922e25026a1dfa3f00f82e79e9fb0e50de099e6722531aaca316e2b08ec4057d153df5eed274697a1ec0d7337fdd9bf772b50c3fcc1373ec00e5932713475ec754ac75b3e5ac5537d7adf9a174ac1ea9063c927b648d05b418f81f7c1a2123ba9d6a9"}]}}, @NL80211_ATTR_PROBE_RESP={0x471, 0x91, "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"}]]}]}, 0xec4}}, 0x0)

[  640.102603][T17086] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0)

[  640.185053][T17089] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:19 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0)

07:28:19 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x802c542a, 0x0)

07:28:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x6}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:19 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010128188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:19 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @union]}}, &(0x7f00000002c0)=""/252, 0x3e, 0xfc, 0x1}, 0x20)

07:28:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0)

07:28:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x2}, 0x0)

[  640.905780][T17106] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:19 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r2)
setgroups(0x0, 0x0)

[  640.951404][T17108] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x7}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:20 executing program 5:
r0 = epoll_create(0x6f9)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

07:28:20 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:20 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010258188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:20 executing program 1:
openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0)

07:28:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

07:28:20 executing program 5:
syslog(0x4, &(0x7f0000000000)=""/7, 0x7)

07:28:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x8}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:20 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010488188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:21 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x4020940d, &(0x7f0000000040))

07:28:21 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x5408, &(0x7f0000000040))

07:28:21 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x4bfa, &(0x7f0000000040))

07:28:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x9}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:21 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000104c8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x30}}, 0x0)

07:28:21 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x853}, 0x40)

07:28:21 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000400)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x227c}}], 0x2, 0x0)

[  642.912075][T17157] validate_nla: 4 callbacks suppressed
[  642.912145][T17157] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:22 executing program 5:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @link_local, @val={@void}, {@ipv4={0x800, @tipc={{0x10, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xf, 0x0, [@dev, @empty, @rand_addr]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0)

[  643.036300][T17159] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0xc}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:22 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0xf}]}}, 0x0, 0x26}, 0x20)

07:28:22 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010608188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:22 executing program 1:
open$dir(&(0x7f0000000440)='./file0\x00', 0x4241, 0x0)

07:28:22 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r0, &(0x7f0000005000)=[{{&(0x7f0000000000)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002140)=[{0x0}, {&(0x7f00000000c0)="fc64d1065006d09aec9f31cb17fd", 0xe}], 0x2}}], 0x1, 0x0)

07:28:22 executing program 5:
open$dir(&(0x7f0000000080)='./file0\x00', 0xd0040, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

[  643.718607][T17174] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  643.787963][T17176] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0xf}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:22 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8970, &(0x7f00000000c0)={'syztnl1\x00', 0x0})

07:28:23 executing program 1:
openat$tun(0xffffff9c, &(0x7f0000000040), 0xae500, 0x0)

07:28:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010688188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:23 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0)

07:28:23 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

[  644.421228][T17190] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x60}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  644.484037][T17193] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:23 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x5427, 0x0)

07:28:23 executing program 1:
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xd0040, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x12fb, 0x0)

07:28:23 executing program 2:
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xd0040, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x400c12f5, 0x0)

07:28:23 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000106c8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20000060}}, 0x0)

07:28:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x93}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  645.158207][T17211] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:24 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x4b67, &(0x7f0000000040))

[  645.233568][T17214] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:24 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000005c0)={'HL\x00'}, &(0x7f0000000640)=0x1e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)

07:28:24 executing program 5:
clock_gettime(0x69d99b65ffb17fc3, 0x0)

07:28:24 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000007c00)={0x0, @nl, @l2tp={0x2, 0x0, @remote}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}})

07:28:24 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010748188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f00000002c0)={'syztnl1\x00', 0x0})

07:28:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  645.851460][T17228] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  645.937486][T17231] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:25 executing program 5:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f00000000c0), 0xffffffffffffff36)

07:28:25 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4)

07:28:25 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x1d}, 0x10)

07:28:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000107a8188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x2}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:25 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000001c0)=@framed={{}, [@func={0x85, 0x0, 0xd}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x9f, &(0x7f0000000240)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

07:28:25 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x400000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044884, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x40, 0x0, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x0, 0x5}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
madvise(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x64)

07:28:25 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188020f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:25 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)

07:28:25 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)

07:28:26 executing program 5:
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xe9)

07:28:26 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x74)

07:28:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x3}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:26 executing program 2:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9)
ioctl$KVM_SET_PIT2(r1, 0x400454cd, 0x0)

07:28:26 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8912, &(0x7f0000000000)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}})

07:28:26 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188030f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:26 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

07:28:26 executing program 4:
syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x60082)

[  647.938367][T17278] validate_nla: 5 callbacks suppressed
[  647.938445][T17278] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x4}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  648.010122][T17280] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  648.096307][T17280] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:27 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000400)=@framed={{}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffff}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

07:28:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)

07:28:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0)

07:28:27 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188050f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:27 executing program 4:
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xd0040, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x80046603, 0x0)

07:28:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x5}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:27 executing program 1:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xb9)

[  648.772614][T17298] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:27 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @broadcast, @empty}}}], 0x18}, 0x0)

[  648.822819][T17298] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:27 executing program 5:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9)
ioctl$KVM_SET_PIT2(r1, 0x800454e0, 0x0)

[  648.876852][T17300] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:28 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188060f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:28 executing program 4:
syz_io_uring_setup(0x734b, &(0x7f0000007280), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)

07:28:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x6}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg(r0, &(0x7f0000002580)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0xc}], 0xc}, 0x0)

07:28:28 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x5408, 0x0)

[  649.553830][T17314] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  649.595705][T17314] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:28 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)

[  649.665515][T17320] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x7}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:29 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x891b, &(0x7f0000000000)={'batadv0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}})

07:28:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188070f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:29 executing program 1:
r0 = openat$null(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@fuse={0xc}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x880)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x0, 0x0, 0x2, r3, 0x1})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r3, 0x5})

07:28:29 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_SIOCADDRT(r0, 0x8904, 0x0)

[  650.371201][T17336] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:29 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188080f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:29 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)

07:28:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x8}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:29 executing program 5:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9)
ioctl$KVM_SET_PIT2(r1, 0x800454d7, 0x0)

07:28:29 executing program 2:
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0xffffffb8)

07:28:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f00000002c0)={'syztnl1\x00', 0x0})

07:28:30 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8953, &(0x7f0000000000)={'batadv0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}})

07:28:30 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188090f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0xaa97c451050f9baf}, 0x14}}, 0x0)

07:28:30 executing program 1:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x3)

07:28:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x9}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:30 executing program 2:
r0 = epoll_create(0x6f9)
r1 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))

07:28:31 executing program 4:
r0 = epoll_create(0x6f9)
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0xfffffff5, 0x0, 0x0)

07:28:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100081880a0f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:31 executing program 1:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9)
ioctl$KVM_SET_PIT2(r1, 0x400454d4, 0x0)

07:28:31 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGETMODE(r0, 0x4b32, &(0x7f0000000040))

07:28:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0xc}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000008480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0, 0x7ffff000}, {0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0)

07:28:31 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100081880b0f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="12000000010201"], 0x18}}, 0x0)

07:28:31 executing program 1:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0xae04, 0x0)

07:28:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0xf}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  653.112775][T17402] validate_nla: 12 callbacks suppressed
[  653.119159][T17402] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  653.147376][T17402] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  653.181039][T17407] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x60}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:32 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$sock(r0, &(0x7f0000005000)=[{{&(0x7f0000000000)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002140)=[{0x0, 0x2}, {&(0x7f00000000c0)="fc", 0x1}], 0x2}}], 0x1, 0x0)

07:28:32 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000400)=@in={0x2, 0x4e21, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=ANY=[], 0x227c}}], 0x2, 0x0)

07:28:32 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100081880c0f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:32 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r3, 0x0)
preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

07:28:32 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000000c0)={'syztnl1\x00', 0x0})

[  653.871585][T17421] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  653.936892][T17423] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:33 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "95279320e806cc8a313910f916d5c05e9e2c67"})
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080))

07:28:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x93}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:33 executing program 4:
clock_gettime(0x0, &(0x7f0000000300))

07:28:33 executing program 5:
semop(0x0, &(0x7f0000000300)=[{0x0, 0x0, 0x1000}, {0x1}], 0x2)

07:28:33 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f00000002c0))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

07:28:33 executing program 4:
keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000180)="29c79e92e80fd6d95fef157fb1e68269423ad19d2f0db5569d7b4fc6b2ac4eecd6f13218653fd53346ce3f677b366005d1c381ba68d75dd0ea3e44db7ab1c38a9a", 0x41})

[  654.919007][T17423] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:34 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "8f"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "1cc397"}]}}, &(0x7f0000000240)=""/194, 0x1000000, 0xc2, 0x1}, 0x20)

07:28:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x0}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100081880d0f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:34 executing program 1:
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000003c0))
socket$rxrpc(0x21, 0x2, 0x2)

07:28:34 executing program 4:
getresuid(&(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000140))

07:28:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002d000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x34}}, 0x0)

[  655.614746][T17454] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  655.675088][T17457] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:34 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000180)=""/198, 0xd0, 0xc6, 0x1}, 0x20)

[  655.752243][T17457] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:34 executing program 1:
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

07:28:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e000000100081880e0f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:35 executing program 4:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_v2', 0x115502, 0x0)

07:28:35 executing program 2:
syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0)

07:28:35 executing program 5:
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RLERROR(r0, 0x0, 0x0)

[  656.399253][T17474] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:35 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data})

07:28:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188100f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:35 executing program 4:
bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

07:28:35 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc040564a, &(0x7f0000000040))

07:28:36 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto, @datasec={0x0, 0x0, 0x0, 0x2, 0x1, [], "8f"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "1cc397"}]}}, &(0x7f0000000240)=""/194, 0x42, 0xc2, 0x1}, 0x20)

07:28:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x4}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:36 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@mcast1, @empty, @mcast1})

07:28:36 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

07:28:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188110f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:36 executing program 2:
r0 = socket$tipc(0x1e, 0x4, 0x0)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0)

07:28:36 executing program 5:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x4c4d, 0x0)
read$snddsp(r0, 0x0, 0x0)

07:28:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:36 executing program 1:
syz_open_dev$video4linux(&(0x7f00000000c0), 0x2, 0x8240)

07:28:37 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc038563c, &(0x7f0000000040))

07:28:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:37 executing program 2:
syz_open_dev$video4linux(&(0x7f0000000000), 0x9, 0x88f80)

07:28:37 executing program 5:
bpf$BPF_BTF_LOAD(0x23, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

[  658.520270][T17523] validate_nla: 8 callbacks suppressed
[  658.520344][T17523] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:37 executing program 1:
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x4, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), 0xffffffffffffffff)

[  658.587859][T17527] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  658.648507][T17527] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:37 executing program 4:
socket$inet6_udplite(0xa, 0x2, 0x88)
select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, &(0x7f0000000200)={0x4}, &(0x7f0000000240)={0x77359400})

07:28:37 executing program 2:
bpf$BPF_BTF_LOAD(0x9, 0x0, 0x0)

07:28:37 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000100), 0x100000001, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140))

07:28:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040246ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x8}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  659.354242][T17547] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  659.428146][T17548] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:38 executing program 4:
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000100)=""/20)

07:28:38 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x2, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x18}, 0xc0}}, 0x0)

07:28:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0x4, 0x1, [], "8f"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "1cc397"}]}}, &(0x7f0000000240)=""/194, 0x36, 0xc2, 0x1}, 0x20)

[  659.502492][T17547] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:38 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private1, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0xd26})

07:28:38 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040346ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x9}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:39 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x2, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

07:28:39 executing program 2:
add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x29, 0xfffffffffffffffb)

07:28:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LABEL={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x2c}}, 0x0)

07:28:39 executing program 4:
bpf$BPF_BTF_LOAD(0x11, 0x0, 0x0)

[  660.233669][T17562] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  660.296553][T17564] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  660.324233][T17564] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xa}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:39 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x83, 0x0, &(0x7f0000000040))

07:28:39 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18)

07:28:39 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040446ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:39 executing program 5:
setrlimit(0x7, &(0x7f0000000b00))
socket$nl_generic(0x10, 0x3, 0x10)

07:28:39 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x980915})

[  661.087349][T17585] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:40 executing program 2:
bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

07:28:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xb}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:40 executing program 1:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f0000000200), 0x48)

07:28:40 executing program 5:
r0 = timerfd_create(0x1, 0x0)
timerfd_gettime(r0, &(0x7f0000000080))

07:28:40 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040546ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:40 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111}}, 0x20)

07:28:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26}, 0x20)

07:28:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xc}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:40 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000540)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)

07:28:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040646ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:41 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/class/xt_idletimer', 0x0, 0x0)
waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0)

07:28:41 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18)

07:28:41 executing program 2:
semget(0x1, 0x0, 0xe812d75febaec6a0)

07:28:41 executing program 1:
clone3(&(0x7f0000002600)={0x10000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

07:28:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x3b}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040746ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:41 executing program 5:
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}})

07:28:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x4000085)

07:28:42 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0x7, 0x1, [], "8f"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "1cc397"}]}}, &(0x7f0000000240)=""/194, 0x36, 0xc2, 0x1}, 0x20)

07:28:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:42 executing program 1:
semop(0x0, &(0x7f0000000300)=[{0x0, 0x7}], 0x1)

07:28:42 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040846ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:42 executing program 5:
semop(0x0, &(0x7f0000000300)=[{0x0, 0x0, 0x1000}, {}], 0x2)
r0 = semget(0x2, 0x0, 0x406)
semop(r0, &(0x7f0000000100)=[{0x4, 0x4, 0x1000}, {0x4, 0x1f}], 0x2)

07:28:42 executing program 4:
read$rfkill(0xffffffffffffffff, 0x0, 0x0)

07:28:42 executing program 2:
clock_gettime(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

[  663.750845][T17647] validate_nla: 12 callbacks suppressed
[  663.750917][T17647] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  663.818815][T17649] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  663.879426][T17649] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1}, 0x1c}}, 0x0)

07:28:43 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)

07:28:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x2}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:43 executing program 4:
pipe2$9p(0x0, 0x8c000)

07:28:43 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040946ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:43 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x2, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x18, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}}, 0x0)

07:28:43 executing program 1:
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)

[  664.641864][T17672] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  664.680825][T17672] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x3}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  664.719242][T17674] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:43 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1})

07:28:43 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040a46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:44 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48)

[  665.288611][T17686] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  665.372357][T17689] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  665.524323][T17689] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x4}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:44 executing program 4:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020)
write$FUSE_OPEN(r0, &(0x7f0000002200)={0x20, 0x0, r1}, 0x20)

07:28:44 executing program 5:
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x1015, 0x0, 0x0, 0x0, 0x0, 0x1})

07:28:44 executing program 1:
bpf$BPF_BTF_LOAD(0x9, 0x0, 0x10)

07:28:44 executing program 2:
add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="fd", 0x1, 0xfffffffffffffffc)

07:28:44 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040b46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

[  666.211598][T17706] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x5}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:45 executing program 1:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40)

07:28:45 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1}]}, 0x18}}, 0x0)

07:28:45 executing program 5:
bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

07:28:45 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)

07:28:45 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040c46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x6}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:46 executing program 1:
msgget(0x2, 0x70d)

07:28:46 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
fcntl$getown(0xffffffffffffffff, 0x5)
fcntl$getown(0xffffffffffffff9c, 0x5)

07:28:46 executing program 4:
msgget(0x1, 0x40)

07:28:46 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
fcntl$lock(r0, 0x9, 0x0)

07:28:46 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040d46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:46 executing program 5:
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

07:28:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x7}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:46 executing program 1:
syz_io_uring_setup(0x80015e7, &(0x7f0000000300), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0))

07:28:46 executing program 4:
r0 = socket(0x1, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

07:28:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80)

07:28:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040e46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:47 executing program 5:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)

07:28:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x8}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:47 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0xf, 0x0, 0x0)

07:28:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}], 0x20}, 0x0)

07:28:47 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188041046ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:47 executing program 1:
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x2400c044)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast1, @in=@empty}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x270482, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c80))
getgid()
io_uring_setup(0x5b2d, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x246})
epoll_create(0x590)
socket$unix(0x1, 0x5, 0x0)

07:28:48 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, &(0x7f0000000680)={{{@in6=@local, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, 0xe8)

[  669.140385][T17767] validate_nla: 12 callbacks suppressed
[  669.140452][T17767] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  669.207830][T17769] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  669.257352][T17769] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:48 executing program 4:
perf_event_open(&(0x7f0000000b80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0)

07:28:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x9}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:48 executing program 2:
syz_emit_ethernet(0x36, &(0x7f0000000380)={@random="7551b30100", @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @rand_addr, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bfc9bc", 0x0, "f253ff"}}}}}}, 0x0)

07:28:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0xb, 0x0, 0x0)

07:28:48 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188041146ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:48 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = socket$inet(0x10, 0x80002, 0x0)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000190007041dfffd946f610500020000e8fe0208010001080008000f000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

07:28:48 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}})

[  669.967969][T17785] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:49 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xb, &(0x7f0000000680)={{{@in6=@local, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, 0xe8)

[  670.028598][T17787] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0xc}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  670.090106][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
07:28:49 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @broadcast}, 0xc)

07:28:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0x4209}, 0x0)

07:28:49 executing program 1:
r0 = syz_io_uring_setup(0x787, &(0x7f0000000300), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0, 0x11012, r0, 0x8000000)
syz_io_uring_complete(r1)

[  671.130174][T17787] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  671.140326][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
07:28:50 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, &(0x7f0000004880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c}}], 0x40}, 0x0)

07:28:50 executing program 4:
syz_emit_ethernet(0xe81, &(0x7f0000000080)={@broadcast, @random="597dab36ef33", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0xe73, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0)

07:28:50 executing program 5:
syz_emit_ethernet(0x1c7, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000000004305"], 0x0)

07:28:50 executing program 1:
syz_emit_ethernet(0x20000156, &(0x7f0000000100)={@dev, @empty, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "4b722af8b7444607fea475e7238b2cffbad42f558821096d116abf30d5286581ca255ee10935636f6ca0fc37e8ee19ed53889743dbed8ac80a8a1f73361d96b2"}}}}, 0x0)

07:28:50 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188041246ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0xf}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:50 executing program 2:
r0 = syz_io_uring_setup(0x787, &(0x7f0000000300), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fed000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x5, 0x13, r0, 0x0)
syz_io_uring_setup(0x787, &(0x7f0000000300), &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fed000/0x2000)=nil, 0x0, 0x0)

[  671.877771][T17822] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  671.937515][T17824] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  671.991714][T17824] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:51 executing program 4:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000100)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f00000001c0), &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8})

07:28:51 executing program 1:
syz_emit_ethernet(0xfc0, &(0x7f0000000080)={@broadcast, @random="597dab36ef33", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0)

07:28:51 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={0x0}}, 0x0)

07:28:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:51 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188046446ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:51 executing program 2:
r0 = socket(0x26, 0x5, 0x0)
write$FUSE_POLL(r0, 0x0, 0x0)

07:28:51 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @random="597dab36ef33", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  672.736672][T17841] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:51 executing program 1:
r0 = socket(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

07:28:51 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, &(0x7f0000000680)={{{@in6=@local, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, 0xe8)

07:28:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x2}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000001000818804d946ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:52 executing program 4:
clone(0x11842000, 0x0, 0x0, 0x0, 0x0)

07:28:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}, 0x1, 0x0, 0xf000}, 0x0)

07:28:52 executing program 1:
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c80))

07:28:52 executing program 5:
syz_io_uring_setup(0xb135, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200))

07:28:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x3}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:52 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f47ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:52 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000074900)={0x3a, [], 0x0, "f6311f7bee7134"})

07:28:53 executing program 1:
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0])
time(&(0x7f0000000040))

07:28:53 executing program 2:
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@dev, @broadcast, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "4b722af8b7444607fea475e7238b2cffbad42f558821096d116abf30d5286581ca255ee10935636f6ca0fc37e8ee19ed53889743dbed8ac80a8a1f73361d96b2"}}}}, 0x0)

[  674.176353][T17871] validate_nla: 5 callbacks suppressed
[  674.176425][T17871] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:53 executing program 5:
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@broadcast, @random="597dab36ef33", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

[  674.237446][T17873] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x4}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  674.319901][T17873] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  674.370316][T17871] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:53 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ad8569", 0x0, 0x0, 0x0, @loopback, @mcast1}}}}, 0x0)

07:28:53 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)

07:28:53 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9ccc6480ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:53 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x6, 0x3, 0x0, 0x0)

07:28:53 executing program 5:
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x2b, 0x0, [@private, @remote, @empty, @rand_addr, @private, @multicast1, @dev, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@multicast1}]}, @generic={0x0, 0x2}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

07:28:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x5}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  675.041100][T17890] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  675.088237][T17890] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  675.162737][T17894] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002380))

07:28:54 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x8, &(0x7f0000000680)={{{@in6=@local, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, 0xe8)

07:28:54 executing program 2:
syz_emit_ethernet(0x36, &(0x7f0000000380)={@random="7551b30100", @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @rand_addr, {[@timestamp_prespec={0x44, 0x4}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bfc9bc", 0x0, "f253ff"}}}}}}, 0x0)

07:28:54 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7430ef410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0)

07:28:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x6}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0)

07:28:54 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e)

[  675.830157][T17908] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  675.870628][T17908] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  675.929248][T17911] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:55 executing program 2:
r0 = socket(0x26, 0x805, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)

07:28:55 executing program 5:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/power_supply', 0x0, 0xa3)

07:28:55 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca74803f410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x7}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:55 executing program 1:
r0 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000240)=""/9)

07:28:55 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

07:28:55 executing program 2:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x1)

07:28:55 executing program 5:
r0 = semget$private(0x0, 0x3, 0x0)
semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/197)

07:28:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x8}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:56 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

07:28:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca74804f410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:56 executing program 4:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

07:28:56 executing program 2:
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
write$binfmt_script(r0, 0x0, 0x0)

07:28:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x9}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:56 executing program 5:
r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)

07:28:56 executing program 1:
r0 = epoll_create(0x3f)
epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)

07:28:56 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca74808f410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:56 executing program 4:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system', 0x800, 0x1a3)

07:28:57 executing program 2:
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

07:28:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0xc}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:57 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000006b80)={0x1, &(0x7f0000006b40)=[{}]})

07:28:57 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca74830f410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:57 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
keyctl$link(0x8, r0, 0xfffffffffffffffd)

07:28:57 executing program 4:
io_uring_setup(0x0, &(0x7f0000000400))

07:28:57 executing program 2:
r0 = socket(0x2, 0x1, 0x0)
connect$can_j1939(r0, &(0x7f0000000080), 0x18)

07:28:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0xf}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:28:57 executing program 5:
socketpair(0x2, 0x2, 0x8, &(0x7f0000001540))

07:28:58 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)

07:28:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca74833f410000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:58 executing program 4:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)

07:28:58 executing program 2:
perf_event_open(&(0x7f0000002440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xb, 0xffffffffffffffff, 0x0)

[  679.483098][T17992] validate_nla: 13 callbacks suppressed
[  679.483169][T17992] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  679.540251][T17995] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x60}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  679.593703][T17995] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:58 executing program 4:
openat$pfkey(0xffffff9c, &(0x7f0000000580), 0x0, 0x0)
io_setup(0x6, &(0x7f0000003380))

07:28:58 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000740), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

07:28:58 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef402000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:58 executing program 5:
accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0)
socketpair(0x2c, 0x0, 0x0, &(0x7f0000000100))

07:28:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@mpls_delroute={0x1c}, 0x1c}}, 0x0)

07:28:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x93}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  680.233907][T18010] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  680.267488][T18010] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  680.340445][T18012] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:28:59 executing program 4:
fork()
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40047703, 0x0)

07:28:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

07:28:59 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef403000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:28:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0)

07:28:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x300}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  680.998731][T18025] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  681.057461][T18028] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  681.123350][T18028] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
07:29:00 executing program 5:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

07:29:00 executing program 1:
getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0)

07:29:00 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x10}, 0x40)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000000140)=""/62, &(0x7f0000000180)=0x3e)
bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, 0x0)
getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, &(0x7f0000000340))
openat$rfkill(0xffffff9c, 0x0, 0x0, 0x0)

07:29:00 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef404000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:29:00 executing program 2:
openat$nvme_fabrics(0xffffff9c, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040), 0x4)
socketpair(0x1d, 0x0, 0x0, &(0x7f0000000080))

07:29:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x500}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  681.715216][T18044] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  681.765128][T18044] batman_adv: batadv0: Adding interface: gretap0
[  681.771631][T18044] batman_adv: batadv0: The MTU of interface gretap0 is too small (1476) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.798017][T18044] batman_adv: batadv0: Interface activated: gretap0
07:29:00 executing program 1:
openat$ashmem(0xffffff9c, &(0x7f0000003480), 0x8bce140d2b8cb044, 0x0)

07:29:00 executing program 5:
request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='\x1b-)s{(/]%(*}/\x00', 0xfffffffffffffff9)

[  681.993100][T18046] can: request_module (can-proto-0) failed.
07:29:01 executing program 4:
r0 = openat$vim2m(0xffffff9c, &(0x7f0000001500), 0x2, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001580))

07:29:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x600}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

07:29:01 executing program 2:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x2, 0x1}, 0x8)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x400, 0x400, {}, {0x3, 0x8, 0x40, 0x8, 0x0, 0x29, "3fa6376d"}, 0x1ff, 0x1, @userptr})
getpid()
geteuid()
fork()
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40047703, 0x72)

07:29:01 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef405000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:29:01 executing program 1:
openat$vcs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x2, 0x2, 0x8, &(0x7f0000001540))

07:29:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x9000aea4, &(0x7f0000000100))

07:29:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x4068aea3, &(0x7f0000000100)={0x131})

07:29:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x700}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  682.821445][T18069] batman_adv: batadv0: Adding interface: erspan0
[  682.828736][T18069] batman_adv: batadv0: The MTU of interface erspan0 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  682.855576][T18069] batman_adv: batadv0: Interface activated: erspan0
07:29:02 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f007a0002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef406000000e3bd6efb440009000e000a0014000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

07:29:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={0x0}}, 0x0)

07:29:02 executing program 4:
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0x10)

07:29:02 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0)

07:29:02 executing program 2:
bpf$MAP_CREATE(0xd, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)

07:29:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @action={@wo_ht={{}, {}, @device_a, @device_b, @initial, {0x0, 0x900}}, @sp_mp_open={0xf, 0x1, {0x0, {}, @val={0x72, 0x6}, @val={0x2d, 0x1a}}}}}]}, 0x64}}, 0x0)

[  683.790452][   T23] =====================================================
[  683.797722][   T23] BUG: KMSAN: uninit-value in kmsan_check_skb+0x3c/0x240
[  683.804980][   T23] CPU: 1 PID: 23 Comm: kworker/u4:1 Not tainted 5.12.0-rc6-syzkaller #0
[  683.813445][   T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  683.824057][   T23] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  683.832244][   T23] Call Trace:
[  683.835548][   T23]  dump_stack+0x24c/0x2e0
[  683.839926][   T23]  kmsan_report+0xfb/0x1e0
[  683.844377][   T23]  kmsan_internal_check_memory+0x212/0x520
[  683.850313][   T23]  kmsan_check_skb+0x3c/0x240
[  683.855057][   T23]  pfifo_fast_dequeue+0x1031/0x1190
[  683.860656][   T23]  ? pfifo_fast_enqueue+0x9f0/0x9f0
[  683.866064][   T23]  dequeue_skb+0x4ad/0x3680
[  683.870749][   T23]  __qdisc_run+0x101/0x490
[  683.875298][   T23]  ? kmsan_internal_set_origin+0x85/0xc0
[  683.881117][   T23]  __dev_queue_xmit+0x26ad/0x4600
[  683.886300][   T23]  ? kmsan_get_metadata+0x116/0x180
[  683.891644][   T23]  dev_queue_xmit+0x4b/0x60
[  683.896284][   T23]  batadv_send_skb_packet+0x622/0x970
[  683.901942][   T23]  batadv_send_broadcast_skb+0x76/0x90
[  683.907469][   T23]  batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0
[  683.914552][   T23]  ? batadv_iv_ogm_queue_add+0x1c40/0x1c40
[  683.920449][   T23]  process_one_work+0x1219/0x1fe0
[  683.925641][   T23]  worker_thread+0x10ec/0x2340
[  683.930555][   T23]  kthread+0x521/0x560
[  683.934735][   T23]  ? process_one_work+0x1fe0/0x1fe0
[  683.939994][   T23]  ? kthread_blkcg+0x110/0x110
[  683.944815][   T23]  ret_from_fork+0x1f/0x30
[  683.949536][   T23] 
[  683.951874][   T23] Uninit was stored to memory at:
[  683.957029][   T23]  kmsan_internal_chain_origin+0xad/0x130
[  683.962956][   T23]  kmsan_memcpy_memmove_metadata+0x25e/0x2d0
[  683.969088][   T23]  kmsan_memcpy_metadata+0xb/0x10
[  683.974762][   T23]  __msan_memcpy+0x46/0x60
[  683.979312][   T23]  pskb_expand_head+0x3d6/0x1e20
[  683.984373][   T23]  batadv_skb_head_push+0x2cc/0x410
[  683.989711][   T23]  batadv_send_skb_packet+0x1ed/0x970
[  683.995123][   T23]  batadv_send_broadcast_skb+0x76/0x90
[  684.001048][   T23]  batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0
[  684.008235][   T23]  process_one_work+0x1219/0x1fe0
[  684.013494][   T23]  worker_thread+0x10ec/0x2340
[  684.018307][   T23]  kthread+0x521/0x560
[  684.022443][   T23]  ret_from_fork+0x1f/0x30
[  684.026891][   T23] 
[  684.029230][   T23] Uninit was created at:
[  684.033745][   T23]  kmsan_internal_poison_shadow+0x5c/0xf0
[  684.039555][   T23]  kmsan_slab_alloc+0x8e/0xe0
[  684.044268][   T23]  __kmalloc_node_track_caller+0xa4f/0x1470
[  684.050505][   T23]  __alloc_skb+0x4dd/0xe90
[  684.055044][   T23]  __netdev_alloc_skb+0x45d/0x810
[  684.060535][   T23]  batadv_iv_ogm_queue_add+0x1376/0x1c40
[  684.066569][   T23]  batadv_iv_ogm_schedule+0x12cd/0x16b0
[  684.072170][   T23]  batadv_iv_send_outstanding_bat_ogm_packet+0xd6e/0xef0
[  684.079311][   T23]  process_one_work+0x1219/0x1fe0
[  684.084493][   T23]  worker_thread+0x10ec/0x2340
07:29:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@delneigh={0x10, 0x1d, 0x1, 0x0, 0x0, {}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0)

07:29:03 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000000), 0x0)
madvise(&(0x7f0000007000/0xd000)=nil, 0xd006, 0xb)

[  684.089401][   T23]  kthread+0x521/0x560
[  684.093510][   T23]  ret_from_fork+0x1f/0x30
[  684.098046][   T23] 
[  684.100446][   T23] Bytes 52-53 of 74 are uninitialized
[  684.105872][   T23] Memory access of size 74 starts at ffff888116a2ac40
[  684.112777][   T23] =====================================================
[  684.119894][   T23] Disabling lock debugging due to kernel taint
[  684.126370][   T23] Kernel panic - not syncing: panic_on_kmsan set ...
[  684.133246][   T23] CPU: 1 PID: 23 Comm: kworker/u4:1 Tainted: G    B             5.12.0-rc6-syzkaller #0
[  684.143362][   T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  684.153682][   T23] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  684.162180][   T23] Call Trace:
[  684.165601][   T23]  dump_stack+0x24c/0x2e0
[  684.170069][   T23]  panic+0x4c6/0xea7
[  684.174201][   T23]  ? add_taint+0x17c/0x210
[  684.178653][   T23]  kmsan_report+0x1de/0x1e0
[  684.183188][   T23]  kmsan_internal_check_memory+0x212/0x520
[  684.189155][   T23]  kmsan_check_skb+0x3c/0x240
[  684.193968][   T23]  pfifo_fast_dequeue+0x1031/0x1190
[  684.199309][   T23]  ? pfifo_fast_enqueue+0x9f0/0x9f0
[  684.204741][   T23]  dequeue_skb+0x4ad/0x3680
[  684.209376][   T23]  __qdisc_run+0x101/0x490
[  684.213909][   T23]  ? kmsan_internal_set_origin+0x85/0xc0
[  684.219746][   T23]  __dev_queue_xmit+0x26ad/0x4600
[  684.224814][   T23]  ? kmsan_get_metadata+0x116/0x180
[  684.230064][   T23]  dev_queue_xmit+0x4b/0x60
[  684.234603][   T23]  batadv_send_skb_packet+0x622/0x970
[  684.240571][   T23]  batadv_send_broadcast_skb+0x76/0x90
[  684.246563][   T23]  batadv_iv_send_outstanding_bat_ogm_packet+0xb2d/0xef0
[  684.256807][   T23]  ? batadv_iv_ogm_queue_add+0x1c40/0x1c40
[  684.263168][   T23]  process_one_work+0x1219/0x1fe0
[  684.268357][   T23]  worker_thread+0x10ec/0x2340
[  684.273822][   T23]  kthread+0x521/0x560
[  684.277940][   T23]  ? process_one_work+0x1fe0/0x1fe0
[  684.284329][   T23]  ? kthread_blkcg+0x110/0x110
[  684.289225][   T23]  ret_from_fork+0x1f/0x30
[  684.296050][   T23] Kernel Offset: disabled
[  684.301900][   T23] Rebooting in 86400 seconds..