fffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x0, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 583.113531][ T2684] validate_nla: 3 callbacks suppressed [ 583.113541][ T2684] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 583.165002][ T2687] devpts: called with bogus options 17:01:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x8000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:40 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 583.253636][ T2696] devpts: called with bogus options 17:01:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, 0x0, 0x0) 17:01:40 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x40000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:40 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x0, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x9000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 583.425611][ T2812] devpts: called with bogus options 17:01:40 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 583.447220][ T2816] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4), 0x1c) 17:01:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xa000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 583.545684][ T2822] devpts: called with bogus options [ 583.606762][ T2892] devpts: called with bogus options 17:01:40 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:40 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x400300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:40 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xb000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4), 0x1c) [ 583.755823][ T2937] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 583.796280][ T2939] devpts: called with bogus options [ 583.833069][ T2941] devpts: called with bogus options 17:01:40 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:40 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:40 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xf0ffff, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4), 0x1c) 17:01:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xc000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 584.089964][ T3182] devpts: called with bogus options [ 584.104760][ T3187] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 584.119083][ T3193] devpts: called with bogus options [ 584.133181][ T3195] __nla_validate_parse: 14 callbacks suppressed 17:01:40 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 584.133192][ T3195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:41 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:41 executing program 0 (fault-call:5 fault-nth:0): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xe000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x1000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 584.339555][ T3302] devpts: called with bogus options [ 584.355167][ T3328] devpts: called with bogus options [ 584.366962][ T3333] FAULT_INJECTION: forcing a failure. [ 584.366962][ T3333] name failslab, interval 1, probability 0, space 0, times 0 [ 584.432239][ T3339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 584.441911][ T3333] CPU: 0 PID: 3333 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 584.450869][ T3333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.460929][ T3333] Call Trace: [ 584.464237][ T3333] dump_stack+0x172/0x1f0 [ 584.468587][ T3333] should_fail.cold+0xa/0x15 [ 584.473192][ T3333] ? fault_create_debugfs_attr+0x180/0x180 [ 584.479010][ T3333] ? ___might_sleep+0x163/0x2c0 [ 584.483875][ T3333] __should_failslab+0x121/0x190 [ 584.488822][ T3333] should_failslab+0x9/0x14 [ 584.493333][ T3333] kmem_cache_alloc_trace+0x2d3/0x790 [ 584.498710][ T3333] ? __kasan_check_read+0x11/0x20 [ 584.503741][ T3333] ? __lock_acquire+0x16f2/0x4a00 [ 584.508807][ T3333] tcp_sendmsg_locked+0x22e5/0x3370 [ 584.514015][ T3333] ? mark_lock+0xc2/0x1220 [ 584.518448][ T3333] ? mark_held_locks+0xa4/0xf0 [ 584.523221][ T3333] ? tcp_sendpage+0x60/0x60 [ 584.527785][ T3333] ? lock_sock_nested+0x9a/0x120 [ 584.532729][ T3333] ? trace_hardirqs_on+0x67/0x240 [ 584.537757][ T3333] ? lock_sock_nested+0x9a/0x120 [ 584.542702][ T3333] ? __local_bh_enable_ip+0x15a/0x270 [ 584.548086][ T3333] tcp_sendmsg+0x30/0x50 [ 584.552399][ T3333] inet6_sendmsg+0x9e/0xe0 [ 584.556819][ T3333] ? inet6_ioctl+0x1c0/0x1c0 [ 584.561471][ T3333] sock_sendmsg+0xd7/0x130 [ 584.565895][ T3333] __sys_sendto+0x262/0x380 [ 584.570398][ T3333] ? __ia32_sys_getpeername+0xb0/0xb0 [ 584.575773][ T3333] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 584.581334][ T3333] ? fput+0x1b/0x20 [ 584.585143][ T3333] ? ksys_write+0x1cf/0x290 [ 584.589655][ T3333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 584.595121][ T3333] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 584.600597][ T3333] ? do_syscall_64+0x26/0x760 [ 584.605282][ T3333] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 584.611359][ T3333] __x64_sys_sendto+0xe1/0x1a0 [ 584.616135][ T3333] do_syscall_64+0xfa/0x760 [ 584.620650][ T3333] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 584.626537][ T3333] RIP: 0033:0x459a59 [ 584.630436][ T3333] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 584.650042][ T3333] RSP: 002b:00007f98488cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 584.658454][ T3333] RAX: ffffffffffffffda RBX: 00007f98488cec90 RCX: 0000000000459a59 [ 584.666426][ T3333] RDX: ffffffffffffffde RSI: 0000000020000080 RDI: 0000000000000004 [ 584.674406][ T3333] RBP: 000000000075bf20 R08: 0000000020b63fe4 R09: 000000000000001c 17:01:41 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xf000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:41 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 584.682383][ T3333] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f98488cf6d4 [ 584.690355][ T3333] R13: 00000000004c7c91 R14: 00000000004ddbc8 R15: 0000000000000005 [ 584.715339][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x10000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 584.822637][ T3552] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 584.839453][ T3550] devpts: called with bogus options [ 584.870866][ T3555] devpts: called with bogus options 17:01:41 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 584.922218][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:41 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:41 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2530000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x11000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 585.054360][ T3666] devpts: called with bogus options [ 585.064846][ T3669] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 585.077144][ T3667] devpts: called with bogus options [ 585.140157][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:42 executing program 0 (fault-call:5 fault-nth:1): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:42 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:42 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:42 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x12000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 585.332609][ T3786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 585.349554][ T3787] devpts: called with bogus options [ 585.367940][ T3790] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 585.383757][ T3789] devpts: called with bogus options [ 585.424661][ T3795] FAULT_INJECTION: forcing a failure. [ 585.424661][ T3795] name failslab, interval 1, probability 0, space 0, times 0 [ 585.437711][ T3795] CPU: 1 PID: 3795 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 585.446653][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.456713][ T3795] Call Trace: [ 585.460021][ T3795] dump_stack+0x172/0x1f0 [ 585.464371][ T3795] should_fail.cold+0xa/0x15 [ 585.468974][ T3795] ? fault_create_debugfs_attr+0x180/0x180 17:01:42 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x4000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 585.474800][ T3795] __should_failslab+0x121/0x190 [ 585.479754][ T3795] should_failslab+0x9/0x14 [ 585.484260][ T3795] kmem_cache_alloc+0x47/0x710 [ 585.489043][ T3795] ? rwlock_bug.part.0+0x90/0x90 [ 585.493993][ T3795] ? lock_acquire+0x190/0x410 [ 585.498740][ T3795] ? __inet_hash_connect+0x42f/0xfd0 [ 585.504034][ T3795] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 585.509757][ T3795] inet_bind_bucket_create+0x2e/0x290 [ 585.515138][ T3795] __inet_hash_connect+0x6f8/0xfd0 [ 585.520311][ T3795] ? inet6_lookup+0xe0/0xe0 17:01:42 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}]}, 0xf8}}, 0x0) 17:01:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x13000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 585.524845][ T3795] ? secure_tcpv6_seq+0x280/0x280 [ 585.529876][ T3795] ? inet_hash+0xb0/0xb0 [ 585.534133][ T3795] ? rcu_read_lock_held+0x9c/0xb0 [ 585.539163][ T3795] inet6_hash_connect+0x76/0xe0 [ 585.544068][ T3795] tcp_v6_connect+0x137f/0x2020 [ 585.548919][ T3795] ? tcp_sendmsg_locked+0x22e5/0x3370 [ 585.554298][ T3795] ? inet6_sk_rx_dst_set+0x6f0/0x6f0 [ 585.559586][ T3795] ? __kasan_check_read+0x11/0x20 [ 585.565665][ T3795] ? __lock_acquire+0x16f2/0x4a00 17:01:42 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 585.570695][ T3795] ? is_bpf_text_address+0xac/0x160 [ 585.575910][ T3795] ? __kasan_check_read+0x11/0x20 [ 585.581006][ T3795] __inet_stream_connect+0x852/0xeb0 [ 585.586300][ T3795] ? __inet_stream_connect+0x852/0xeb0 [ 585.591765][ T3795] ? tcp_sendmsg_locked+0x22e5/0x3370 [ 585.597145][ T3795] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 585.602700][ T3795] ? ipv4_mib_init_net+0x570/0x570 [ 585.607822][ T3795] ? kmem_cache_alloc_trace+0x397/0x790 [ 585.613368][ T3795] ? __kasan_check_read+0x11/0x20 [ 585.613389][ T3795] tcp_sendmsg_locked+0x2497/0x3370 [ 585.613409][ T3795] ? mark_lock+0xc2/0x1220 [ 585.613428][ T3795] ? mark_held_locks+0xa4/0xf0 [ 585.613445][ T3795] ? tcp_sendpage+0x60/0x60 [ 585.628065][ T3795] ? lock_sock_nested+0x9a/0x120 [ 585.642212][ T3795] ? trace_hardirqs_on+0x67/0x240 [ 585.647244][ T3795] ? lock_sock_nested+0x9a/0x120 [ 585.652190][ T3795] ? __local_bh_enable_ip+0x15a/0x270 [ 585.657573][ T3795] tcp_sendmsg+0x30/0x50 [ 585.661821][ T3795] inet6_sendmsg+0x9e/0xe0 [ 585.666240][ T3795] ? inet6_ioctl+0x1c0/0x1c0 [ 585.670837][ T3795] sock_sendmsg+0xd7/0x130 [ 585.675268][ T3795] __sys_sendto+0x262/0x380 [ 585.679786][ T3795] ? __ia32_sys_getpeername+0xb0/0xb0 [ 585.685171][ T3795] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 585.690741][ T3795] ? fput+0x1b/0x20 [ 585.694558][ T3795] ? ksys_write+0x1cf/0x290 [ 585.695625][ T4003] devpts: called with bogus options [ 585.699068][ T3795] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 585.699084][ T3795] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 585.699100][ T3795] ? do_syscall_64+0x26/0x760 [ 585.699117][ T3795] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.699139][ T3795] __x64_sys_sendto+0xe1/0x1a0 [ 585.730675][ T3795] do_syscall_64+0xfa/0x760 [ 585.735193][ T3795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.741087][ T3795] RIP: 0033:0x459a59 [ 585.744995][ T3795] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.764608][ T3795] RSP: 002b:00007f98488cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 585.773024][ T3795] RAX: ffffffffffffffda RBX: 00007f98488cec90 RCX: 0000000000459a59 [ 585.781005][ T3795] RDX: ffffffffffffffde RSI: 0000000020000080 RDI: 0000000000000004 [ 585.788985][ T3795] RBP: 000000000075bf20 R08: 0000000020b63fe4 R09: 000000000000001c [ 585.796955][ T3795] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f98488cf6d4 [ 585.804932][ T3795] R13: 00000000004c7c91 R14: 00000000004ddbc8 R15: 0000000000000005 17:01:42 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}]}, 0xf8}}, 0x0) [ 585.843855][ T4198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 585.845013][ T4187] devpts: called with bogus options 17:01:42 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x5000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:42 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 585.984421][ T4213] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 586.014859][ T4216] devpts: called with bogus options 17:01:42 executing program 0 (fault-call:5 fault-nth:2): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x14000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:42 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 586.037251][ T4215] devpts: called with bogus options [ 586.054702][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x1e000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:43 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 586.214803][ T4389] devpts: called with bogus options [ 586.225545][ T4407] FAULT_INJECTION: forcing a failure. [ 586.225545][ T4407] name failslab, interval 1, probability 0, space 0, times 0 [ 586.250108][ T4407] CPU: 0 PID: 4407 Comm: syz-executor.0 Not tainted 5.4.0-rc3-next-20191018 #0 [ 586.259075][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.269151][ T4407] Call Trace: [ 586.272458][ T4407] dump_stack+0x172/0x1f0 [ 586.276822][ T4407] should_fail.cold+0xa/0x15 [ 586.281426][ T4407] ? fault_create_debugfs_attr+0x180/0x180 [ 586.287251][ T4407] ? ___might_sleep+0x163/0x2c0 [ 586.292115][ T4407] __should_failslab+0x121/0x190 [ 586.297062][ T4407] should_failslab+0x9/0x14 [ 586.301573][ T4407] kmem_cache_alloc_node+0x268/0x740 [ 586.306868][ T4407] ? find_held_lock+0x35/0x130 [ 586.311700][ T4407] ? ip6_mtu+0x2e6/0x450 [ 586.315954][ T4407] __alloc_skb+0xd5/0x5e0 [ 586.320294][ T4407] ? __kmalloc_reserve.isra.0+0xf0/0xf0 [ 586.325847][ T4407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 586.332091][ T4407] ? tcp_write_queue_purge+0x626/0x13c0 [ 586.337649][ T4407] sk_stream_alloc_skb+0x113/0xc90 [ 586.342773][ T4407] tcp_connect+0x1059/0x4480 [ 586.347382][ T4407] ? __tcp_transmit_skb+0x3820/0x3820 [ 586.352759][ T4407] ? secure_tcpv6_ts_off+0x24f/0x360 [ 586.358064][ T4407] ? secure_dccpv6_sequence_number+0x280/0x280 [ 586.364232][ T4407] ? rcu_read_lock_held+0x9c/0xb0 [ 586.369265][ T4407] ? prandom_u32_state+0x13/0x180 [ 586.374299][ T4407] tcp_v6_connect+0x153b/0x2020 [ 586.379157][ T4407] ? tcp_sendmsg_locked+0x22e5/0x3370 [ 586.384542][ T4407] ? inet6_sk_rx_dst_set+0x6f0/0x6f0 [ 586.389829][ T4407] ? __kasan_check_read+0x11/0x20 [ 586.394862][ T4407] ? __lock_acquire+0x16f2/0x4a00 [ 586.399894][ T4407] ? is_bpf_text_address+0xac/0x160 [ 586.405109][ T4407] ? __kasan_check_read+0x11/0x20 [ 586.410147][ T4407] __inet_stream_connect+0x852/0xeb0 [ 586.415448][ T4407] ? __inet_stream_connect+0x852/0xeb0 [ 586.420916][ T4407] ? tcp_sendmsg_locked+0x22e5/0x3370 [ 586.426299][ T4407] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 586.431869][ T4407] ? ipv4_mib_init_net+0x570/0x570 [ 586.437003][ T4407] ? kmem_cache_alloc_trace+0x397/0x790 [ 586.442562][ T4407] ? __kasan_check_read+0x11/0x20 [ 586.447599][ T4407] tcp_sendmsg_locked+0x2497/0x3370 [ 586.452807][ T4407] ? mark_lock+0xc2/0x1220 [ 586.457240][ T4407] ? mark_held_locks+0xa4/0xf0 [ 586.462009][ T4407] ? tcp_sendpage+0x60/0x60 [ 586.466519][ T4407] ? lock_sock_nested+0x9a/0x120 [ 586.471461][ T4407] ? trace_hardirqs_on+0x67/0x240 [ 586.476502][ T4407] ? lock_sock_nested+0x9a/0x120 [ 586.481447][ T4407] ? __local_bh_enable_ip+0x15a/0x270 [ 586.486837][ T4407] tcp_sendmsg+0x30/0x50 [ 586.491087][ T4407] inet6_sendmsg+0x9e/0xe0 [ 586.495503][ T4407] ? inet6_ioctl+0x1c0/0x1c0 [ 586.500097][ T4407] sock_sendmsg+0xd7/0x130 [ 586.504515][ T4407] __sys_sendto+0x262/0x380 [ 586.509024][ T4407] ? __ia32_sys_getpeername+0xb0/0xb0 [ 586.514402][ T4407] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 586.519965][ T4407] ? fput+0x1b/0x20 [ 586.523772][ T4407] ? ksys_write+0x1cf/0x290 [ 586.528281][ T4407] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 586.533736][ T4407] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 586.539192][ T4407] ? do_syscall_64+0x26/0x760 [ 586.543871][ T4407] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.549941][ T4407] __x64_sys_sendto+0xe1/0x1a0 [ 586.554709][ T4407] do_syscall_64+0xfa/0x760 [ 586.559217][ T4407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.565099][ T4407] RIP: 0033:0x459a59 [ 586.568991][ T4407] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.588592][ T4407] RSP: 002b:00007f98488cec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 586.597010][ T4407] RAX: ffffffffffffffda RBX: 00007f98488cec90 RCX: 0000000000459a59 [ 586.604986][ T4407] RDX: ffffffffffffffde RSI: 0000000020000080 RDI: 0000000000000004 17:01:43 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}]}, 0xf8}}, 0x0) 17:01:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x20000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 586.612964][ T4407] RBP: 000000000075bf20 R08: 0000000020b63fe4 R09: 000000000000001c [ 586.620938][ T4407] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f98488cf6d4 [ 586.628918][ T4407] R13: 00000000004c7c91 R14: 00000000004ddbc8 R15: 0000000000000005 [ 586.650793][ T4436] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:43 executing program 0 (fault-call:5 fault-nth:3): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:43 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 586.751344][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 586.838123][ T4625] devpts: called with bogus options 17:01:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x38090000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:43 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x7000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 586.939222][ T4653] devpts: called with bogus options [ 586.987902][ T4847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:43 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 17:01:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 587.039800][ T4905] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000080)={0x7ff, 0x2, 0x7}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000040)={r5, 0x2}) 17:01:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x40000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:43 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 587.181385][ T4980] devpts: called with bogus options 17:01:44 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xa000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x48000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 587.292402][ T5061] devpts: called with bogus options 17:01:44 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 17:01:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8400, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1ff, 0x30000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f00002df000/0x1000)=nil, 0x1000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 587.481888][ T5368] devpts: called with bogus options 17:01:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x4c000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:44 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r2, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/36, 0xfffffffffffffffb}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0xfffffffffffffff7, 0x6, &(0x7f0000001640)=[{&(0x7f00000002c0)="6ef36bce95a1831d04f0e90f0c57088241a3ea9fe60f03d8a6d9b1fbb9a82599dc3ef06fa68d78bd1087261406665d3cb709ea05e707200fd5361a86c3c99c25201f76168d1504420554c817c57d58886c5aa65426b454d1e738fbce47107c21da139faed47a1fe03277a27843330e060ca230efb0027e870b54c0cecccddddfe90885526259f08978d4fba902000f8ae472c52c86298dd2d378010cfac53b872377e6b5412724053480f1ec369ca232ee8bdaedaa23bf358d6d14b3959fc9324f0dae7adeaa", 0xc6, 0x1}, {&(0x7f00000003c0)="846a3c59a6e66f2aaff736ad88f0226fb62a89d719cc261d003c42669ca6f2e7985b61eb0c518524c69029d584e317a65fbbf02e888de878d580dfda5cb51dc3dc9c536e75f3704c60ec1718fe767a6ee2908b3e948878ef02461d73188926132f1139cd78612940eafc07c1", 0x6c, 0x9a}, {&(0x7f0000000440)="64ec9a59161b765328c7b691c94959a50a4ca61f488d6e5ce401dc0deeb499cc63502c19ac5d0d5860abaa3fd4d1c24218ab506c3eacab3855576aebbe9bfc08072f7b1d85ea17fa3b995ba67b4149df088fbd543c8922914c0f11bf5368e41d828e666c5ee8685b3e9f3546a697723c79a18b8afffd756fdab56d617a289f21c6afe55d60f4e0b374e1d252e3feba2b88c719b7da9d7d99bc0192a832a5ae01ce2e886e2da46124b7ef7004fbc39d7626def939be99f6503a3157df77b65681560341b49ed387783b7204d2b0070f8fb30df2f0b31e693e", 0xd8}, {&(0x7f0000000540)="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", 0x1000, 0x6}, {&(0x7f0000001540)="18533a9245bb7c0fce6f7c8d3300529e3c7919b91a703c1269ae9d1088f9bbd9a2fd8b81de6937cd93ad334aef1ed1e4e99c4c22d45fa10bdf218bcc7e764c87c86686034af537", 0x47, 0x56f}, {&(0x7f00000015c0)="6b8953781e10c370541094acae91d2275d012cb65d3d5a39bf8e33ff5c97718aa0b2ebb433acc1a27969ae84d6e436b0a94de30db743fc74bf19e1fc345b07b9e44be52a498d5070930027119ff20df0e96979", 0x53, 0x5}], 0x20, &(0x7f0000001700)={[{@prjquota='prjquota'}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@max_batch_time={'max_batch_time'}}]}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) mq_timedreceive(r4, &(0x7f0000000180)=""/69, 0x45, 0x3, &(0x7f0000000200)={0x77359400}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0x14ce0047c7f86c51, 0x20000004, &(0x7f0000000140)={0xa, 0x2}, 0xfffffffffffffee2) 17:01:44 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 587.614557][ T5545] devpts: called with bogus options 17:01:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x60000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:44 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x202000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000080)=0xdf) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x2040) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x10000, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r7}}, 0x24}}, 0x0) bind$xdp(r3, &(0x7f0000000180)={0x2c, 0xb, r7, 0x8}, 0x10) io_uring_setup(0x3db, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x371}) fstat(r2, &(0x7f0000000280)) [ 587.807607][ T5645] devpts: called with bogus options 17:01:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x65580000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:44 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 587.941586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 587.947479][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:01:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr="9210334b22afa72f59d5a3c77a099a43"}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:44 executing program 3 (fault-call:18 fault-nth:0): creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:44 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xe000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 588.050653][ T6072] devpts: called with bogus options 17:01:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x68000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:44 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:44 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) socket$packet(0x11, 0x3d8584dc96c7163c, 0x300) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 588.140440][ T6117] validate_nla: 2 callbacks suppressed [ 588.140450][ T6117] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 588.172817][ T6119] devpts: called with bogus options 17:01:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x6c000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f00000000c0)="961609bf8ab809ba23d17c78a150ced6a626fcd4957ed3d94ba13cf35bdf4f19631e7332bb7a4392a7c4a4ef17fb515690b5989e3bb4e2d86323ab4f1362ebdd25345a0998c739decfeda5abbb6405617e3836714bcabfe409f8b567999d7f76a25c38ab56f0553f00b3e0869c27134611f0f8de66364f09fb34ffcc9b360928fce10b53f242d55d092130a935c1c5011630b5b38a6b5da151030e371f6d1bf0d5c2a5b8cf8ff85876e4a6d19a8b54a802a99f8002d9a563934afcad3375e3a9e38e3463c484aac6ae564a64c6e02208533cd49724ee3126a68268993d4a07a887d1de981670", 0xe6, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 588.341382][ T6381] devpts: called with bogus options 17:01:45 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xf000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:45 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x74000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:45 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000340)={0xffffffffffffffc6, 0x7, 0x9, 0x2, 0x3, [{0xffffffffffffff7f, 0x1, 0x5, 0x0, 0x0, 0xc0d}, {0xa1, 0x1, 0x1, 0x0, 0x0, 0x200}, {0x8, 0x10000, 0xe3b, 0x0, 0x0, 0x1}]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x44, 0x4) ioctl$KDENABIO(r4, 0x4b36) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0xc0000, r4}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r10, 0x80046402, &(0x7f0000000480)=0x1ff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={&(0x7f0000006840), 0xc, &(0x7f0000006800)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r11, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0xff8a}}, 0x0) r12 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KDENABIO(r12, 0x4b36) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x140000, r12}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={r6, 0x140000, r13}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x1000)=nil, 0x1000}) r14 = getpid() sched_setscheduler(r14, 0x5, &(0x7f00000001c0)) move_pages(r14, 0x2, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000080)=[0x3, 0x76f, 0x6, 0x6, 0x6], &(0x7f0000000140)=[0x0, 0x0], 0x0) seccomp(0x0, 0x0, &(0x7f0000000200)={0x5, &(0x7f0000000180)=[{0x683, 0x1f, 0x9, 0x5}, {0x6, 0x7, 0x5, 0x9}, {0x20, 0x5f, 0x2, 0x3ff}, {0xe27, 0x4, 0x7, 0xfff}, {0x8000, 0xfd, 0xcc, 0xdd}]}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 588.509643][ T6557] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0800823506029c7c44b74bef44aaef28b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101000) write$P9_RAUTH(r3, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x10, 0x3, 0x4}}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x1b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='V\xbdD\xbcC\x00`f]p\"', 0xfffffffffffffff7) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 588.616559][ T6606] devpts: called with bogus options 17:01:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x7a000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 588.638053][ T6651] devpts: called with bogus options 17:01:45 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:45 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x10000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 588.728597][ T6712] device syz_tun entered promiscuous mode 17:01:45 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x81000000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 588.867321][ T6814] devpts: called with bogus options 17:01:45 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x0, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x9, 0x0, 0x3f}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 588.888961][ T6864] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 588.907430][ T6861] devpts: called with bogus options 17:01:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200100) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:01:45 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000200)=""/66) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, 0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xee00, r3) r4 = gettid() tkill(r4, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40010000100013070000000000000000ac1414bb0000000000000000000000000079b464e5ab6eb0161638f2bd000000000000000000000000000100000000000000000000000080000000e060c1035dba16f3e379443a5d39839a57b56ade8778a513063ac02a1dfcf80d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e3b4bd5ff1995fbbf7ff00000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000010000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x4000040) 17:01:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x88a8ffff, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 589.054632][ T6966] devpts: called with bogus options 17:01:45 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x20000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:45 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x0, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 589.174778][ T7018] devpts: called with bogus options 17:01:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x9effffff, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 589.254669][ T7180] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:46 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200, 0x0) r2 = geteuid() openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x40000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, [], 0x20}, @in6=@remote, 0x4e22, 0x0, 0x4e22, 0x9, 0x2, 0x80, 0x0, 0x0, 0x0, r2}, {0x80000000, 0x4, 0x3, 0x1a7, 0x400000000000000, 0x0, 0x6, 0x80000000}, {0x1, 0x7, 0x5, 0x5}, 0x3, 0x6e6bbd, 0x3, 0xfbc0fd5128219698, 0x5, 0x3}, {{@in6=@mcast2, 0x4d2, 0x33}, 0x91d851e314a328b9, @in6=@mcast1, 0x3501, 0x3, 0x2, 0x99, 0x4, 0x7fff, 0x1}}, 0xe8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000180)={@local, @loopback, @dev}, &(0x7f00000001c0)=0xc) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x4000000, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) write$P9_RLINK(r7, &(0x7f0000000500)={0x7, 0x47, 0x2}, 0x7) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)={0xb8, 0x0, 0x5, [{{0x2, 0x0, 0x4, 0x521, 0x3f, 0x8000, {0x0, 0x0, 0x5, 0x1, 0x100, 0x5, 0x7, 0x9, 0x9, 0x4, 0x3f, r2, r8, 0x6a25, 0xfffffffe}}, {0x0, 0x80, 0x9, 0xc0, '/dev/dsp\x00'}}]}, 0xb8) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x1000, 0x4060004, &(0x7f0000001540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000380)=ANY=[@ANYBLOB="47184bda905be9fb382783865c9df9f000351f4292957100"]) r9 = socket$packet(0x11, 0x2, 0x300) sendfile(0xffffffffffffffff, r9, &(0x7f00000000c0), 0xb328) 17:01:46 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x20000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000100)={0x2, 0x401, 0x2, 0x7fff, 0x6, 0x100}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/\x00ei/dr\x05\x00\xdePpd#\x00', 0x5, 0x84c00) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x121080, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x4, 0x630, [0x20000140, 0x0, 0x0, 0x20000170, 0x20000454], 0x0, &(0x7f0000000040), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x10, 0xf9, 'bridge_slave_1\x00', 'veth0_to_bridge\x00', 'vxcan1\x00', 'lapb0\x00', @dev={[], 0x18}, [0x101, 0x0, 0x1fe, 0xff], @local, [0xff, 0x0, 0x101], 0xee, 0x19e, 0x1ce, [@m802_3={'802_3\x00', 0x8, {{0x80, 0x9, 0x1, 0xb}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6=@local, [0xffffffff, 0xfffffefe, 0xffffff00, 0xff000000], 0x4e23, 0x89, 0x4, 0x4e22, 0x10, 0x8}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x3, 0xe, 0x0, 0x0, "9cd7406f2115272b4d5286c7036af4fd3ce0049bd8440ca4a638f737f6df9c2dc234110d0e96d727287fda3821236b256d0c369d84b90ef55d2e96a51f7358f1"}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xffffffffffffffff}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7ff}}}}, {0x9, 0x40, 0x178e2, 'sit0\x00', 'ipddp0\x00', 'hsr0\x00', 'irlan0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xf24845b6c105a2e4, 0x0, 0x0, 0x0, 0x0, 0xff], 0xae, 0xae, 0xe6, [@connbytes={'connbytes\x00', 0x18, {{0x401, 0x7f, 0x2}}}], [], @arpreply={'arpreply\x00', 0x10, {{@remote}}}}]}, {0x0, '\x00', 0x2, 0x7ffffffffffffffc, 0x1, [{0x2, 0x0, 0x8863, 'batadv0\x00', 'bridge_slave_0\x00', 'bridge0\x00', 'ip6_vti0\x00', @local, [0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0x80, 0xc7464ef1f9caaab8, 0x0, 0x0, 0xff], 0xee, 0x15e, 0x18e, [@cpu={'cpu\x00', 0x8, {{0xff, 0x1}}}, @helper={'helper\x00', 0x28, {{0x1, 'sane-20000\x00'}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0}}}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x5, 0x8, 0x9100, 'nr0\x00', 'nlmon0\x00', 'nlmon0\x00', 'bridge_slave_0\x00', @random="d282a82c53ac", [0x7298451f35c799ba, 0x1fe, 0x0, 0x8366f4a780b80b82, 0x0, 0xff], @remote, [], 0x6e, 0xf6, 0x12e, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0x6}}}, @common=@log={'log\x00', 0x28, {{0x78, "4b072c29ab924d7c4e3878bb82f481cd71baa8d8cab61b59b97df729a499", 0xc}}}], @snat={'snat\x00', 0x10, {{@remote, 0x3}}}}]}]}, 0x6a8) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 589.319127][ T7200] devpts: called with bogus options [ 589.324746][ T7296] __nla_validate_parse: 12 callbacks suppressed [ 589.324757][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:46 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x0, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xf0ffffff, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:46 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x40000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 589.467975][ T7366] devpts: called with bogus options [ 589.539478][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 589.580184][ T7450] devpts: called with bogus options 17:01:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/.4n\x120xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:46 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) sched_setattr(r1, &(0x7f0000000040)={0x30, 0xd, 0x0, 0xfff, 0x2, 0x0, 0x440, 0x8}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240), 0x4000000000dc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xf1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000002c0)={r6, 0x8, 0x101}, 0x8) vmsplice(r3, &(0x7f0000000100), 0x2ef, 0x1c) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6e5df2c433080d330000000001000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x4}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KDENABIO(r9, 0x4b36) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000080)={{0x0, 0x80, 0x80, 0xff, 0x71, 0x20}, 0x9}) [ 589.793152][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 589.830519][ T7647] devpts: called with bogus options 17:01:46 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x48000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 589.860973][ T7803] devpts: called with bogus options 17:01:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xffffa888, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x7, [@dev={0xac, 0x14, 0x14, 0x1d}, @remote, @broadcast, @empty, @local, @broadcast, @local]}, 0x2c) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) fcntl$dupfd(r1, 0xa707e695df724302, r3) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = accept$netrom(r5, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r7, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x4, 0x1, 0x4, 0x5}, {0x5, 0x3, 0x3, 0x2}, {0x200, 0x1, 0x1, 0x6}]}, 0x10) 17:01:46 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:46 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013e6ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) [ 589.989370][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 590.039607][ T7849] devpts: called with bogus options [ 590.050714][ T7846] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xfffff000, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 590.099009][ T7876] devpts: called with bogus options 17:01:46 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 590.158287][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:47 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x2a01e, &(0x7f0000000200)='/sei\xfe\xff\x00\x88\xac\xe8<$a[A\xd8L\x9b\x9f8. 4\xe9\v\xdaQ\xb6\xf5\xdc\xe8\x8b\xee\x86\x17\xb0H\x17\v\xe9\xff&\x00\v\xac\x8b\x9e^\xf6\x05\xb7v\xb7\a\xa22\x9e\xd4\xeb\xb0\xaag\xc4\xc2\xbd,\xae\xdd\x99\x02\xc0\xc5\x98e\x0fs\x8b\x89') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) socket$inet6_dccp(0xa, 0x6, 0x0) 17:01:47 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x4c000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xffffff7f, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 590.286194][ T8061] devpts: called with bogus options 17:01:47 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 590.347862][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:47 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d64350000000000000000000000000000000000000000000900"/248], 0x140}}, 0x0) [ 590.395147][ T8105] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:01:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xffffff9e, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 590.548830][ T8180] devpts: called with bogus options [ 590.555305][ T8177] devpts: called with bogus options 17:01:47 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x60000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 590.596877][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xfffffff0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:47 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:47 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:47 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000140)="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") [ 590.734482][ T8595] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x4e21, 0xffffffff, @rand_addr="26beb6675fa224ea3345cea543179cd1", 0xfffffffd}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') r5 = socket(0x1, 0x6, 0x8f) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001e40)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8020004}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000000) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1020008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20400}, 0x4004000) fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KDENABIO(r8, 0x4b36) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r9, 0x0, r9) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000002c0)='h\xf9bla\x00\xb1yF\xb8{z\xc0\xdb\xe0\x15\xf0[\xbb\xc5\xb4\xa0\xe7\xe0\x81O6c\xa1D\xca\x1cM?4\x84\xa4\xfc\xef,\xcb\xc7\xb7\x99\xda\xf5\x80\xbc*\xd4N\xf9\xe2\xcd\xe5\xeb\xad3\xab\xa3?\x92G\xa0\x91Z\x10\xa3\xa8;\xb8n`rk\xb6\xd5$\x81@\xeb\x86:x\x19=\x998B\xb6\x0f\xda\xa9\xb6REl]M\xbe\x12\v\x0f\x14(J\xf8\xee%\x9e~\xbf\xbd\xa1\xab4\t\xbfz\b\\e\x98\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00', 0x21) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x7}, 0x1c) [ 590.795592][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0xffffffff, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 590.859548][ T8600] devpts: called with bogus options [ 590.867928][ T8631] devpts: called with bogus options 17:01:47 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x65580000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:47 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x8) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000100)={0x4, 0x100, 0x2, {0xfff, 0x3ff, 0x5, 0x1000}}) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000200)='smaps\x00') write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:47 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 590.993826][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:01:47 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) iopl(0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xff6b) sendto$inet6(r0, &(0x7f0000000080), 0x2bf, 0x40, &(0x7f0000b63fe4)={0xa, 0x3, 0x0, @mcast1}, 0x1c) 17:01:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xbdef) [ 591.059597][ T9054] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 591.087633][ T9053] devpts: called with bogus options 17:01:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0f0000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:48 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f00000001000130700000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000fc000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/168], 0xf0}}, 0x4000000) [ 591.212625][ T9064] devpts: called with bogus options 17:01:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:48 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x68000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0001020}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x450d5681fbdac03b, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xbe9f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7f513cc7dd1966da}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x301}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc60da9f8ffdbda6a, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f00000000c0)=""/142) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r3, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:48 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}]}, 0xf8}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 591.353113][ T9269] devpts: called with bogus options 17:01:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x41ca3c96, 0x620201) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000140)={r4, &(0x7f0000000080)=""/46}) [ 591.409937][ T9279] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:48 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6=@rand_addr="0000001000", 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}, 0xffffffffffffff03}}]}, 0x140}}, 0x0) 17:01:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 591.475266][ T9281] devpts: called with bogus options 17:01:48 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}]}, 0xf8}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000040)="ec"}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 591.633699][ T9442] devpts: called with bogus options 17:01:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="670000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) dup(r3) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x5a8, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x248000) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={[{@gqnoenforce='gqnoenforce'}]}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:01:48 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6c000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 591.740295][ T9496] devpts: called with bogus options 17:01:48 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x80000000, 0x100300) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000100)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:48 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}]}, 0xf8}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 591.809674][ T9505] mmap: syz-executor.2 (9505) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 17:01:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:48 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") preadv(r0, &(0x7f0000001200), 0x2c0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl(0xffffffffffffffff, 0x5, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = creat(&(0x7f0000001240)='./file0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000080), 0xfffffffffffffcaa, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @mcast1}, 0x1c) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000001280)={@null=' \x00', 0x0, 'veth1\x00'}) [ 591.914575][ T9691] devpts: called with bogus options 17:01:48 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x74000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 591.994519][ T9733] devpts: called with bogus options 17:01:48 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000100)={0x1, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000080)={0x20000005}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:48 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:48 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbc, &(0x7f0000000140)="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") r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe3, 0xc000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) 17:01:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00e00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 592.171101][ T9825] devpts: called with bogus options 17:01:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000000)=[0x7, 0x8001]) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$rose(r4, 0x104, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f00000000c0)="827c5eb971c74a0304a147cb410ea67a5bf0d7081410f785e5aa13b78b4167ee7c0e71f44338cb5e0d8760", 0x2b, 0xc804, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 592.269051][T10059] devpts: called with bogus options 17:01:49 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e03f03001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:49 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x98, 0x1, {{'md5\x00'}, 0x268, "910baf30cda7849bf6c4e62afbc731a2b8a8f17030a9f39df8b1c92875023a91a969a10e8653c2e5c006f23b7fcb2102ef12388169bbdc21ef1297afcb6085c1f196e8815bfee31aaaa8cc1894"}}]}, 0x190}}, 0x0) 17:01:49 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x7a000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r1, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000001c0)={0x2, 0x0, 0x2080, {0x800, 0x107804, 0x1}, [], "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", "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"}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x1) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x193, 0x80000) [ 592.474076][T10269] devpts: called with bogus options [ 592.498960][T10316] devpts: called with bogus options 17:01:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a40000201800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x484, &(0x7f0000b63fe4)={0xa, 0x2, 0x4}, 0x1c) 17:01:49 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x81000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:49 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="00f0ff7f1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:49 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f000000a900)={@rc={0x1f, {0x0, 0x9, 0x81, 0x3f, 0x1, 0x20}, 0x7f}, {&(0x7f000000a840)=""/186, 0xba}, &(0x7f0000007940), 0x60}, 0xa0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) r5 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x101400) recvmmsg(r5, &(0x7f000000a540)=[{{&(0x7f0000000500)=@can, 0x0, &(0x7f0000002900)=[{&(0x7f00000002c0)=""/32}, {&(0x7f0000000580)=""/4096}, {&(0x7f0000000340)=""/63}, {&(0x7f0000001580)=""/93}, {&(0x7f0000001600)=""/35}, {&(0x7f0000001640)=""/225}, {&(0x7f0000001740)=""/105}, {&(0x7f00000017c0)=""/18}, {&(0x7f0000001800)=""/4096}, {&(0x7f0000002800)=""/199}], 0x0, &(0x7f00000029c0)=""/183}, 0x7}, {{&(0x7f0000002a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b00)=""/247}, {&(0x7f0000002c00)=""/100}, {0xfffffffffffffffd}], 0x0, &(0x7f0000002cc0)=""/195}, 0xffffffc0}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000002dc0)=""/4096}, {&(0x7f0000003dc0)=""/184}], 0x0, &(0x7f0000003ec0)=""/165}, 0x81}, {{&(0x7f0000003f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0, &(0x7f0000006380)=[{&(0x7f0000004000)=""/122}, {&(0x7f0000004080)=""/92}, {&(0x7f0000004100)=""/4096}, {&(0x7f0000005100)=""/4096}, {&(0x7f0000006100)=""/214}, {&(0x7f0000006200)=""/83}, {&(0x7f0000006280)=""/84}, {&(0x7f0000006300)=""/125}], 0x0, &(0x7f0000006400)=""/3}}, {{&(0x7f0000006440)=@x25, 0x0, &(0x7f0000006700)=[{&(0x7f00000064c0)=""/186}, {&(0x7f0000006580)=""/131}, {&(0x7f0000006640)=""/187}], 0x0, &(0x7f0000006740)=""/28}, 0x8}, {{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000006780)=""/202}, {&(0x7f0000006880)=""/4096}, {&(0x7f0000007880)=""/152}, {&(0x7f000000a740)=""/96}, {&(0x7f00000079c0)=""/208}, {&(0x7f0000007ac0)=""/212}, {&(0x7f0000007bc0)=""/4096}, {&(0x7f0000008bc0)=""/103}, {&(0x7f0000008c40)=""/24}], 0x0, &(0x7f0000008d40)=""/4096}, 0x5}, {{&(0x7f000000a7c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x0, &(0x7f000000a140)=[{&(0x7f0000009dc0)=""/104}, {&(0x7f0000009e40)=""/48, 0xfffffef0}, {&(0x7f0000009e80)=""/146}, {&(0x7f0000009f40)}, {&(0x7f0000009f80)=""/68}, {&(0x7f000000a000)=""/36}, {&(0x7f000000a040)=""/213}], 0x0, &(0x7f000000a1c0)=""/96}}, {{0x0, 0x0, &(0x7f000000a500)=[{&(0x7f000000a240)=""/154}, {&(0x7f000000a300)=""/126, 0x278}, {&(0x7f000000a380)=""/75}, {&(0x7f000000a400)=""/232}]}, 0x9}], 0x134, 0x9e65b5e847282f2c, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='/selinux/policy\x00') write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f0000000100)=""/4) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000240)={0x7, 0x8, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/233], 0x140}}, 0x0) ioprio_set$pid(0x1, r1, 0x2) 17:01:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)=""/131, &(0x7f0000000180)=0x83) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000000)="8c071f31331e748b05023a1b40ac67607c08119b46b87b4bfce95f6e1fa85a56decbd0ceb58531d940eebd", 0x2b, 0x800, &(0x7f0000b63fe4)={0xa, 0x2, 0x401}, 0x1c) 17:01:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbf, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000002c0)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) sendto$inet(r4, &(0x7f0000000300)="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", 0x1000, 0x400c0, &(0x7f0000001300)={0x2, 0x4e20, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDENABIO(r6, 0x4b36) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000200)={r7, 0x4, &(0x7f0000000080)=[0x6, 0x2, 0x800, 0x1], &(0x7f0000000140)=[0x400, 0x8, 0xfd7], 0x10, 0x4, 0x6545, &(0x7f0000000180)=[0x4, 0x2, 0x5, 0x8], &(0x7f00000001c0)=[0x8, 0x1, 0xfffffffb, 0x16, 0xdf, 0x6, 0x9, 0x7]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f00002df000/0x8000)=nil, 0x8000}, &(0x7f0000000280)=0x10) [ 592.857438][T10807] devpts: called with bogus options 17:01:49 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x88a8ffff, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="effdffff1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 592.931107][T10872] devpts: called with bogus options 17:01:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) 17:01:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = socket(0x1, 0x0, 0x4) bind$vsock_dgram(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) sendto$inet6(r3, &(0x7f00000001c0)="293e3e39071e15574d117b0adb69efaa5aa0afd3910015361609a0306c7c34aa3c3a079c5932640597540c7f5f9f97572c47fccb70c19a61981e3f2ae421da0dce9b4c8ebfe0ebe54b3c8ce5e60849159f0d2b573db48b8e9d7b7cb50a6c694cb8e237bc9498419f8f6f0398a479af84b921e99b945716e676014eb3b16bbbd6b737ebfb4a652d3f04d0ca7762faab3a", 0x90, 0x40000, &(0x7f0000000280)={0xa, 0x4e24, 0xffffffc0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xcea2}, 0x1c) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000100)={@local, @loopback, @local}, &(0x7f0000000140)=0xc) 17:01:49 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x721640, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:49 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000f00210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 593.140580][T11038] devpts: called with bogus options 17:01:50 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x9effffff, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 593.210077][T11091] devpts: called with bogus options 17:01:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240200001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:50 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r0, 0x0, 0xa, &(0x7f0000000200)='vboxnet1.\x00'}, 0x30) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:50 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r7, 0x101}, 0xc) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) [ 593.377741][T11303] validate_nla: 5 callbacks suppressed [ 593.377752][T11303] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='\xfbcev/dri/ca\xd5Z\xaa\t', 0x4, 0x2201) lseek(r0, 0x0, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000200)={0x7, 0x0, [], {0x0, @reserved}}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbe, &(0x7f0000000140)="5a2e7ea456bcd2b515304e9ca33eae2ac1af5bcb1554635c57c0e26789e0fb2c8a20bcd37a32dbe0859104accf8c1699d74100c84d738bde8a2ec0e83f0c952c0d8969b6207c5f0cb9367e4d3e5485a92afc3718d3") 17:01:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240300001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 593.441284][T11305] devpts: called with bogus options [ 593.448155][T11306] devpts: called with bogus options 17:01:50 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:50 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="31df200e89d6d44262cc4c148c3b0000000000000000ab2b1d785a357243011677cccc000000006fa35b08122248a9517279cc800ee0e30e6ccfe37790531ef3121b6b5a9671f8b6dd88c69e5dc82578e4dabc6ab885fd07748707001ca60e46eb97109c181fa56ab87a65bc274ef8fab3eac3719b46565077e3d709ff7a0d8189b9bbe3245c01d64607e81d46a07d8930f745b5aae71c1eedaead7ff413a363212cb67e59ec6b871bbe8c794a8cb98dc51a16cb7000", 0xfe88, 0x8000, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x64, 0x10, 0x300, 0x0, 0x0, {{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, {@in=@multicast2, 0x0, 0x33}, @in=@broadcast, {}, {0x4}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x800) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vsock\x00', 0x800, 0x0) write$FUSE_LSEEK(r8, &(0x7f0000000640)={0x18, 0x0, 0x8, {0x5}}, 0x18) 17:01:50 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc0000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240400001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:50 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x100, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x2, 0x0, 0x1, {0x9, @pix={0x48, 0x0, 0x56555959, 0x0, 0x7, 0x7ff, 0x3, 0x1, 0x0, 0x2, 0x3}}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000000)=0x4, 0x8) 17:01:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x4, &(0x7f0000000000)="0800b5055e479be87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x120200, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000000c0)=""/255) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 593.758088][T11824] devpts: called with bogus options [ 593.759051][T11825] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:50 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240500001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:50 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x101480, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDENABIO(r6, 0x4b36) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000200)='devpts\x00', &(0x7f0000000240)='./file0\x00', r6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000500)=""/250) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240600001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:50 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00e0000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 594.026663][T12161] devpts: called with bogus options 17:01:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10000, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={{0x3, 0x0, @identifier="53fc664e02c1677078f7ccc8a3cfd5f1"}, 0xbd, [], "7b8a034de898def39eb8037d8d0777bcec03e4b4d8c33a5aec985f3bbbe26cac6725b2052d1df6d3055dcd8ff8484dd7b9893286238bdbb5cfec0acca3e5d99e7f25f69d6c30a88784f2122f36602e227d0c7fca99695e25c0d771401b18d3821f11da1c10dae535aac9e10a743281b97fad3f0a8dd2f193374f2dfb9e5c8a0ca2f79ff07970756b2e707dbaa18bcc7b53797157aed17d57f59d7d98f8cccb009ebfcca55c37c04bc723c9b945b8607588ba05b4c486cbbc66f0363170"}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x101, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:01:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f00000000c0)=0x5, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) bind$netrom(r5, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1800000036000502d25a80648c6394fb0124fc0004000b40", 0x18}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:50 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 594.129839][T12244] devpts: called with bogus options [ 594.142702][T12250] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240700001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:51 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42400, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="be0000000300000006000000524dc7a1d1637eec638fb225341b5167400cc06100feae42e236bbeaaa97bbaa68ef05ffd78e5b15a3d857530ee7f62e868e6bb4dfcc125ee4971f95aa20d4d45bc968490b71979fe75c51d8b80364d513636c5aa48655066a54f17b1b2a21b086dba0f96e7badc734f3354bef3017337f55842395c9e898f9be4657de00c566116afb91cab5a625f0f930a4b62be31dadea67e82ce4917e5f3b7a89682a60f1415537ca4618d3f9aa6eac386c6960715e11acf3e89e36ad9c147f895d19"]) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 594.290619][T12486] devpts: called with bogus options 17:01:51 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x10, &(0x7f0000000240)={&(0x7f0000000000)=""/185, 0xb9}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f0000000340)={&(0x7f0000000140)=""/225, 0xe1}}, 0x10) 17:01:51 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xe03f0300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240800001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 594.423337][T12629] devpts: called with bogus options [ 594.472019][T12671] devpts: called with bogus options 17:01:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400541, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/212) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x89}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000100), 0x2) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f00000001c0)) 17:01:51 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000bf10d4e0f64d14e5ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000002000000000000000000000008001d00edb6f6c8ea00000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000"], 0x140}}, 0x0) 17:01:51 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0), 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 594.552384][T12678] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240900001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 594.704127][T12740] devpts: called with bogus options 17:01:51 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) mmap(&(0x7f00002e1000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = semget(0x3, 0x0, 0x100) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000280)=""/113) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x40}, &(0x7f0000000080)=0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'veth0_to_team\x00', @broadcast}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4, 0xa226}, &(0x7f0000000180)=0x8) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socket$l2tp(0x18, 0x1, 0x1) getpeername$tipc(r2, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r5, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:01:51 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xeffdffff, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240a00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 594.763169][T12892] devpts: called with bogus options 17:01:51 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(r0, 0x0, &(0x7f0000000200)={0x3, 0xffffffff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) write(r2, &(0x7f0000000240), 0xfffffff3) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'cpuset'}, {0x20, 'devpts\x00'}, {}, {0x20, 'devpts\x00'}, {0x20, '/dev/vbi#\x00'}, {0x20, 'devpts\x00'}, {0x20, 'selinux'}], 0xa, "0d22ad4d136203f2658c1259225016fe492fd484d1d7f764a9feffe322069bd31c21b884fdeb2706c8eed7583f00945f115fe5ff4ba22bbd8afb1a45c67d37250b54451d6b38f424"}, 0x86) ioctl$KDENABIO(r4, 0x4b36) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000080)=0xffff5559) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:51 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0), 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 594.862596][T13001] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) 17:01:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x8, 0x5, 0xff, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002e0000/0x1000)=nil, 0x1000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 595.004719][T13006] devpts: called with bogus options 17:01:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240b00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:51 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xf0ffffff, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 595.062694][T13108] devpts: called with bogus options 17:01:51 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0), 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 595.156029][T13275] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:52 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x8}, {0xa, 0x4e24, 0x280, @dev={0xfe, 0x80, [], 0x28}, 0x7476}, 0xffffffffffffffff, 0x1ff}}, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240c00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:52 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x52963e3e0a5b593c, 0x0) ioctl(r0, 0x1, &(0x7f0000000340)="08ecffffffffffff0300000000000000c276a28aca05809928f9fd9980706c4666354d861d457b83903cc46875d2a2a300000000e36095937b3ff637ee901f0dd45022dc6b64707d3da17764964e7bcd2655a2dc15a9df") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x1, 0x0, @rand_addr, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x48a80, 0x0) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f0000000240)={0x5, 0x0, 0x200}) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KDENABIO(r9, 0x4b36) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="028f0100", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) r15 = socket$inet(0x2, 0x4000000805, 0x0) r16 = socket$inet_sctp(0x2, 0x5, 0x84) r17 = dup3(r15, r16, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r17, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r16, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r17, 0x84, 0x7a, &(0x7f000059aff8)={r18}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r18}, &(0x7f0000000300)=0x2f2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={r19}, &(0x7f0000000140)=0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r20 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r20, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000280)=0xe8) ioctl$sock_inet6_SIOCADDRT(r20, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, r21}) getpeername$inet6(r20, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000001c0)=0x1c) [ 595.353329][T13413] devpts: called with bogus options 17:01:52 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xff030000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240e00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 595.413887][T13466] devpts: called with bogus options 17:01:52 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29", 0x66) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:52 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000200)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000500)="d2628d97e267df6b93a99ae5790cfc0051956116d9a1edc4fdacdecd48ca685db7fe981b96317af671707f2890cbfe0a65fdf877b42b7346b43ed77f32d836939a60dd7cc37df278da255ff408642858800d8b37a51a7de2039b7cae2a3461590cfe509b902500b4c43e17c4f204bbb4b976e76084b425d8376efdda2a473485b3606c3ece25752dce9efbf82a1c47d13817f8a843ef0053d54d37337e994cb6ff64e9bb", 0xa4}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="a2b41d1d3dc9c1707de1262c50422b174b2d01e2e21201fd2eebd2bc4d38bea907be0ac949b73971365fb1529922423f56253012874c01e8d73446f5b71f2bcd7bf8be7ff0b516b10042f9cf920378a174af8cb4bc84281c9329add33f26eeba80c577d9c167fb76b361e528ea118102c4976500e40f4b21b95a969d240365ce6e96d12a31435df53852e3ed75628bb4aa43fdf4f7b455af6aefe299ab33409c6cf85685d314d5122646", 0xaa}, {&(0x7f0000001680)="b9042cb8523f3fed67daa94afa26d717c7704d93aa2377bae56e700c2a8cf15b2606651c75d09235b47bc6b4da2d66aa2c5a2a8defea4edb3801641e3a45c67b6fb59253419d0327a344cdca9f289b40a62e8e0668b6af6657f394efd0baa0573b60ff198960fd801d09f77fcb16b2a224d260777a58086da3d219703746dce8ad8bca5bb2c9d47450e1b373e6fa5b6d922b5158a593107d8a6be0a763b9f6c312db2cd1381ba7320f5c3dc96d5bf78a773f5863ad8293f96869ad155cdf7116862c17849f91f9d68d", 0xc9}, {&(0x7f0000000080)="69502ccab3d9392df024da476aa26615956a5aedb5480aeb1277238538761f", 0x1f}, {&(0x7f0000001780)="36e8f3dd1d3ed0b2514c1a8e05124521caf8e37082dbf299eeb6a372e36a9ca308c3a568c179e5c52d1ec77511032b3e3a6543cc126cbd5ccee9fd1547aa351a5a47dd55d5d63dd5049a027b9c885978663cc30c77d65aa988592b1648331b6bee06a25054f3815dc5cde8ba7421cdc9cd8ddc60f05a03dfcda094b98dbe0a16d2122da8c4fbdb3ffaed715c62a26d8408ba4560d853b4d8cfc4db66a1367f3c9ff2136388210fd4f85edbfaefe7f51dd5787a6858", 0xb5}], 0x6, &(0x7f00000018c0)=[{0x68, 0x14, 0x7fff, "5970f480da1ef099ac3ab68e8b86648f65a6fa669899e7192ca9d42f34d58e69dbb00ffe724cd1bce94e0cf22f5e5d03ab2648537a9b5b8b227a1982c303a99268d99be97662b001483a619551cdcb846ed67536212e"}, {0xb8, 0x109, 0xa887, "2c59dfe6aa3d6ae82f6c99c9633eca123ba83ee78e1146f34e9a8e2390bdd391ff19d332cdb9f0b1e68c6bf3249a7d6078702cdf7c9c2e3d3c8e354735a80bcf09a632c14b2da891046f47a5e095fd2af49a7d7a9ab20f05c6b74afc72f81892c439cc6e75ae6938103dcfd42e34156feec83d03b307c63f84db7c45b70ea8a5b7cabe13fb9ba3a9c58e0f915e7ba6086fc18138abe29ee00383a8a14775174cd60741ebd6777aeb"}, {0x18, 0x116, 0x4, "de6dfc087813"}, {0xd8, 0xfe, 0x200, "7258462c2a7b7a5e4bd5f26e80369129fade55514e34564553fc1e51c57835d8b3e3bda78cbf7abaf8ff4f5e7ed73f224b7e0d312fe61efe2390da4ba2e8919e3a90957c8f40f37ed51d7db92d14e0d1fec5d6f4b71886d5fd4e1f616cc68766a98050c40c849af0d0d0cc257fe747f6c42bad36ec070aff3b6b091b95200f12a7d9313e0bdb10cd49ee6c60e012a2b99430ae820a24611097b1f74b6498c856affcd2a4434f4dee68020fd109772a06c16ab53610f1408c454872c55cde1e0e73a047"}, {0xf8, 0x102, 0x2, "e35617ca9257dd1e3adb976272a14ed9409c2b9e0d9a7ab4751ddc47b2473cd948d3dd8e6d293d5e8131e56abadeae32d86e194a560c7fb7153dbec19abb97c1b92581aa68761ca4a4e4d329d51a7c18cb494516fbcf8f089bf1d426425278c2baf80ff7a47d6ae1424e05405d8eb404783ed7bb33983adb041552d4b1fab5fcb2e703ea0b4d7ecb9b3323dd322028e076685b6c5950f86fd09b4ad8a7e1883a07b0fec85a8198fe6d19ecbd9b543afbf41e692483440e27d3a6fb488e376471473b3657f79ebf5851833d2628d5169d4bfad2262ef911c0d5369db8d598855cab"}], 0x308}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000280)={0x50000, "54ef53c9c98373b76230edb4454073bbbf27f620925359da2e23f6bca0e3e216", 0x2, 0x8000, 0x80, 0x442b189626f2bcf1, 0x4}) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r6, 0x0) write$P9_RSTATu(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="010100007d02000000dd000600070000fcad00000000080000000000000000008000ff7f0000af020000000000000100000012006264657673656c662b6b657972696e67277d84006e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d70b002f6465762f6877726e670009002f6465762f707070000f002f6465762f6472692f636172642300", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0x101) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000140)=""/253) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VIDIOC_S_FBUF(r8, 0x4030560b, &(0x7f0000000380)={0x21, 0x10, &(0x7f0000000340)="094bc17d7cedd412a2ffcfdf194bbb66c63e8b629d70cafa24ae1417ddd028f382135bc18440fd93889038fd0e74", {0x7dc, 0x5, 0x59555956, 0x2, 0x3, 0x57, 0x6, 0x5}}) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x1a100, 0x0) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x6) mq_timedsend(r1, &(0x7f0000000040)="26cd9c4cefeb", 0x6, 0x7b546e9f, &(0x7f0000000300)={0x77359400}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r10, &(0x7f0000000140), 0x290, 0x0) ioctl(r10, 0x0, &(0x7f0000000080)="eb9412e668516c71c27b5d533f00"/26) [ 595.576963][T13550] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 595.594500][T13547] devpts: called with bogus options 17:01:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240f00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 595.666422][T13660] devpts: called with bogus options 17:01:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000000)=""/43, 0x80000001}) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800000, 0x110, r2, 0x0) 17:01:52 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29", 0x66) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="241000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:52 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xffffa888, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:52 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) setregid(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4001000010001307000000000000de24189fc47221280000000000002d0600296700000000000072b189755e86", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) ptrace$pokeuser(0x6, r1, 0x7, 0x7fffffff) [ 595.898319][T14067] devpts: called with bogus options 17:01:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x6) fsetxattr$security_capability(r1, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v1={0x1000000, [{0x5, 0x100}]}, 0xc, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x44b40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x158, r2, 0x112, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x4, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5b5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3b0a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0xba}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xee, @dev={0xfe, 0x80, [], 0x21}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x27d893daa2fd614b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000000)={0xd, 0x2, {0x53, 0x1f, 0x9, {0x0, 0x2}, {0xfff, 0x2a}, @ramp={0x3, 0x8f68, {0x6, 0x8, 0x0, 0xf3d1}}}, {0xf7, 0x4ac, 0x6, {0x1}, {0x3ff, 0xfc00}, @rumble={0x0, 0x4}}}) 17:01:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="241100001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:52 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29", 0x66) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 595.972691][T14079] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:52 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6f) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 596.068656][T14177] devpts: called with bogus options 17:01:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="241200001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:53 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') read$FUSE(r0, &(0x7f0000000500), 0x1000) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000200)={@remote, @local, @multicast2}, &(0x7f0000000240)=0xc) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@null, @remote, @null, @default, @rose, @netrom]}, &(0x7f0000000100)=0x40, 0xf39489f77e12a64c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x40200000, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000001500)=0x0, 0x1d, 0x0, &(0x7f0000001540)=""/250, 0xfa, &(0x7f0000001640)}, 0x40) sched_getparam(r3, &(0x7f00000016c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="4001000010001307000000000002e575c7ec742dff4bcf0000000000000000000000f9ffffff0000000000000000000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000200000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000050001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040022be6fc07b11dd462b4c4d2efed3c40634ae1db8d8d25068dbd10719dc334ce"], 0x140}}, 0x0) [ 596.166079][T14184] devpts: called with bogus options 17:01:53 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xfffff000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0x3, "7ce2f93c18c69f963e6b08205906aa07ade7abf6ee9e12b412513995c054394b", 0x1, 0x1}) 17:01:53 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a", 0x99) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 596.303669][T14433] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="241300001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 596.351854][T14430] devpts: called with bogus options 17:01:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 596.409067][T14538] devpts: called with bogus options 17:01:53 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a", 0x99) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="241400001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:53 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:01:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x80009, 0x8, 0x7, 0x399}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r1, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x101, 0x2, 0x3f, 0x5770000, 0x6, 0xc09, 0x7}, 0x1c) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:01:53 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xfffffdef, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 596.650448][T14892] devpts: called with bogus options 17:01:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="241e00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:53 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a", 0x99) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 596.699120][T14929] devpts: called with bogus options 17:01:53 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) pread64(r0, &(0x7f00000000c0)=""/231, 0xe7, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 596.748347][T14935] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:53 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x20) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x2, 0x10001) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000740)={0x1, 0x8, 0x0, [{0x401, 0x0, 0x0, 0x23, 0x80, 0x9, 0x3}, {0x10001, 0x400, 0xffff, 0x20, 0x81, 0x2, 0x4}, {0x2, 0x5f38, 0x7, 0x0, 0x40, 0x40, 0x2}, {0x7, 0x8, 0x80000001, 0xff, 0x69, 0x20, 0x4}, {0x6, 0x9, 0x7, 0x1, 0x4, 0x1f, 0x9}, {0x2, 0x3, 0x74a, 0x0, 0x7, 0x14, 0x3}, {0xffffffff, 0x2, 0x2, 0x2c, 0x1, 0x80, 0x73}, {0x7f, 0x58, 0x62a, 0x2b, 0x1, 0x5, 0x7}]}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0xffffffffffffffff, 0x80a000) getsockopt$inet6_tcp_int(r4, 0x6, 0x14, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100013070000000000000100000000000000000000004000000000000000000000000000000000000000000100000000000000000000000000000000c2d34de32cdd1a2454134cb96da8b7b65e0851b43a1f9a3d319970ba61f97fd7085ff1e450a57e686f7ac1ff4c5113d39d806d90780a98a67b86d8d68c3405cf81146a3fc9336fac8b7bccc27893d98908e7f59281c69183dbcd60700bfbe2da8f18d80199ffe9c44c720f5ea9e33c1471814e8b1d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:01:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="244800001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 596.862225][T14975] devpts: called with bogus options 17:01:53 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xffffff7f, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/d\x00', 0x1, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x84, &(0x7f0000000140)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7'}, 0x30) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x1, r2}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000100000009000000000000000010000000000000480a000000000000000000000000c00002000000000000000200"/64]) [ 596.934515][T15168] devpts: called with bogus options 17:01:53 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd2", 0xb3) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:53 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x800100a, 0x7, 0x2}) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="244c00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:54 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xffffff9e, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:54 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd2", 0xb3) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 597.169871][T15444] devpts: called with bogus options [ 597.174285][T15469] devpts: called with bogus options 17:01:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='yeah\x00\xf3l\x1eh\x83\x15\xa2\x8d\ta.\r\xf2\xcb2\xeaF4\xdd\xb5\x92\xf1\xe2\xcd\xbc\xa6\xd6\xeb\xdb\x9a\xdc\x8d\x9e\xb7LN7\xfaS;4CR\xab:2\xbf\xa5\xf1\f\xf8\x13Q\xc5\x8d\x1f\x173\x1c(\xc4\xb7\xe0\x10\xb4\x14\xe4\xd3\xb0%\xa1K\xfe{\xdeT\x85\xbbB\xbf@vL\xc6\xa5\xed\xc5\x00\xad\xeaz\x97\xef\x9al}\xad`G!\x9b\xdb\xa3\x87$\xf3\xf09\t9\x16\x97\xb9p\xc4V\xcc\xd9,t\xcc\x0f\xc2w\x95\xf7\xf6C\xaf\xa2\x80\xf2C\xed\xfd\xf5\x8b\xfcSu\xddM\"0M\x85\xc2\xeb\xba\xdc%\x02\xdf\xa6\xb6\x1f\xd4?\xbf\x91\xdfg\xa2\xb9\xc3\x8e\xc5\x9f\nRT\x1b\xb9w\xb0\xea\xc6\x17I\x95;\xf9\xa8^!\xb7\xed(\xd3\x14\xf8V\x8cp%\x17C\x05', 0xcb) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x20000084, &(0x7f0000000080)={0xa, 0x2, 0x0, @rand_addr="00000000feffffffffffffff00", 0x4}, 0x1c) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000000)) 17:01:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDENABIO(r1, 0x4b36) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x2, 0x5}, 0x2) 17:01:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="246000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:54 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) tkill(r1, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) getsockopt$rose(r3, 0x104, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) sched_setparam(r5, &(0x7f0000000100)=0x40000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000060000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000e4ffffffffffff32000000ffffffff0000000000000000000000000000000000000000000000000000000000001d0000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000"], 0x140}}, 0x0) 17:01:54 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xfffffff0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="246800001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 597.490970][T15689] devpts: called with bogus options [ 597.498275][T15686] devpts: called with bogus options 17:01:54 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd2", 0xb3) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:54 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @rand_addr=0x3}, {0x2, 0x4e20, @rand_addr=0x3f}, 0x248, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='teql0\x00', 0x20, 0x1000, 0x1}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) getsockopt$inet_buf(r3, 0x0, 0x2d, &(0x7f00000001c0)=""/179, &(0x7f0000000080)=0xb3) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) 17:01:54 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x4000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="246c00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0xfffffffffffffe43) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={r3, r4, r5}, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 597.738132][T16009] devpts: called with bogus options [ 597.758556][T16011] QAT: Invalid ioctl [ 597.786191][T16015] devpts: called with bogus options 17:01:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='+dev/d2i/ca^d#\x00', 0x800, 0x454000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x30}, 0x10) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:01:54 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r8}}, 0x24}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r10, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r14, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r14}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000880)={'team0\x00', r14}) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r17, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r17, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) getsockopt$inet6_mreq(r17, 0x29, 0x14, &(0x7f0000002e40)={@initdev, 0x0}, &(0x7f0000002e80)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}, {{&(0x7f0000000640)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000680)="eb714656f080e921dddc95b74b8ee455d6664b6860b36c1e9a5269af7b0ab90e617cb1a7e9b01df2ee3225aac26348d79dacc52ad6b45a331b5d4c9064b48c72e5df687bb26d49b35b7aba6451ab6d2a720e0c68e6fd42e0439aeda1f6cfb0f56bc1947f781fe355b7d5cb26114de807792226bed2a76487e39d22487a82160700266cbfac07660d60396aff0116a1b907be7eda78d6a4", 0x97}, {&(0x7f0000000740)="241a04dd479a47c8a5f0495879", 0xd}, {&(0x7f0000000780)="138cd4509f0a70a773cbb63707ca41df008f49553c107e3428775affb78d324a8febed540c79abf0671debbacd6421d4bb83caafb42d386fa430f709a5d3d1173d84f89cd163044f4b6389d0f1773301c0113639f442f502b5e8d607689ed999e8672450ea309ec754e1bcdd654d09d6f860735caafcd9bf4e8c2c822d27f53dd0ff25ee7a5f4ccf7bd789b7f4e9185dd3a8d59c89ebe911a07106562f08b3acf860383b62ea", 0xa6}], 0x3, &(0x7f00000008c0)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @loopback, @empty}}}], 0x58}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000980)="8221925c8ede9cc838c6a96a7fdecc7d3207285d2eaae388fb2a0cad399d780790d271cfebf9", 0x26}, {&(0x7f00000009c0)="c632e4a22cbc106e98a77e30c4de46544827c84d68ef4a95de9733c00faa676e7a035782304c6393e855a9", 0x2b}, {&(0x7f0000000a00)="1f08e4d9e0ac97bdf5c39dd4f6fe99d788083e1cc32e48cb8f48b1d2174f124ecc7ee5cfb1b68ef80a7a381c0ffcd651d6d442559b812c41ba3c42575da32154f47567f9a0e3050329938508112a7138a8df8cecffb86fddf561c34ff7cc00d23c97b88c0e6412e8b65e5c29b9fab83a2338bb9cd48e8fd5", 0x78}, {&(0x7f0000000a80)="257078e0bfb546aa36a3d8", 0xb}, {&(0x7f0000000ac0)="8e217724420933ffc0093dd5ff253400fd29332d2d0a432a94ed321b3b62dd03facce197e7793c3bbd5160e803af5787effa5c58e88b29ce2f9b290c2b9d0e0c677e494aa7d5f2b653cf01cb4d591f9e92", 0x51}, {&(0x7f0000000b40)="ab881326d2aa5440bf6d839687ec552276582f4f9dc0cbefa30f1741ec650df142b38e210652ee1981269db5fee6723ef118ad8cfb73a82d359ef3a0b9287709e1df146aeb5795032e4e507aed0c807f598b2b20512a0e50e215f43c85bf3c", 0x5f}, {&(0x7f0000000bc0)="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", 0x1000}], 0x7, &(0x7f0000001c40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0xd, 0x4, [{0x0, 0x7, "3f1138465e"}]}, @ra={0x94, 0x6}, @ra={0x94, 0x6, 0x20}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xfe, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @empty]}, @cipso={0x86, 0x2f, 0x800, [{0x6, 0x4, "75de"}, {0x0, 0x4, "0ae9"}, {0x0, 0x5, "8e409e"}, {0x0, 0xb, "c2b6e1c3199b96b723"}, {0x6, 0x11, "965759cc53a19b0c77ad6b3091e01f"}]}]}}}], 0xd0}}, {{&(0x7f0000001d80)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000001dc0)="13475f145acf9204fbf626d85285b39ac85a27d790b14715e4edc316dd", 0x1d}, {&(0x7f0000001e00)="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", 0x1000}], 0x2, &(0x7f0000003380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @loopback, @rand_addr=0xb0}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x13, 0x6, [@local, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x169, 0x9, "224db92109aa2c"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x80}}, {{&(0x7f0000002f40)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002f80)="42366915", 0x4}, {&(0x7f0000002fc0)="e2ae253f74b1a3b2f7f4cc84397851afb92048bb665f42f6a4579aa5d876e84148b159350018cc424832394dbb8e451aed16a3884249a311203141d630cf0a2617e61dcb4d099f4bf4ec8c7f36ea5402bd5cee4d19130f21baaaa72eae557a6d020e043718fdb78eac473f892694b6459e09f3df88e897135ddf0db7842a49372e16e06e2ac12df4c55a34799f4a0a0c009740cbdec3ab8371dfe3509a644ec7906d05ee23ca0d7c0733a73918f60672772299fc57defae9e5c9d50ece8bc229464330f7623d09945f77f63605c960", 0xcf}, {&(0x7f00000030c0)="c99b2ccb22938a48c69342c5fe58eb6d64b4b3b751795bf07429af50f784a67bfbacd624ef0d2a8ca6b2135333b03bc5ac673776b4e60aafa0de33bda63591d34aa5641ef4fc08e06ae4f992c69553917e12a1df0533", 0x56}, {&(0x7f0000003140)="7ccb03a8f9774f330fe6f8d8fd2057086937e47095ac53991d3c50c8ec65676a013546e1cc0748cd338cfb787f43f3c25db51ec4619b3f6cda4b3daa37bc1ca0992e31d89ed8f88268fda4906fa74f0e6eefb8e4459c504dbd8275dcc47546a301f2405c440caaf12c", 0x69}], 0x4, &(0x7f0000003200)}}], 0x5, 0x4000010) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r19 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r19, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="247400001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:54 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410a", 0xc0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:54 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x40030000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 597.950872][T16132] devpts: called with bogus options 17:01:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@broadcast]}) 17:01:54 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = shmget(0x1, 0x12000, 0x5e0098bb7ae5d5eb, &(0x7f0000fee000/0x12000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000500)=""/177) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 598.067494][T16409] devpts: called with bogus options 17:01:54 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = open_tree(r4, &(0x7f0000000100)='./file0\x00', 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x8000}, {r1, 0x8008}, {r2, 0x3e84}, {r5, 0x4000}, {r6, 0xc400}], 0x5, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x80}, 0x8) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000000000)) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r8, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="247a00001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:55 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410a", 0xc0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:55 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xf0ffffffffffff, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 598.233828][T16574] devpts: called with bogus options [ 598.295794][T16590] devpts: called with bogus options 17:01:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24f000001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:55 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410a", 0xc0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:55 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@proto={0x8, 0x19, 0x2b}, @algo_auth={0x48, 0x1, {{'sha512\x00'}}}]}, 0x140}}, 0x0) [ 598.523196][T17010] devpts: called with bogus options 17:01:55 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x100000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 598.544892][T17011] devpts: called with bogus options 17:01:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240003001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:55 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113", 0xc6) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 598.594664][T17015] validate_nla: 6 callbacks suppressed [ 598.594674][T17015] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240005001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240006001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:55 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0xa200900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000080)=[{{0x77359400}, 0x0, 0x0, 0x20000000}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) timerfd_create(0x6, 0x80000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) write(r3, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x2, 0x3, 0x9bad, 0x2, 0x800}}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r4 = accept4$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10, 0xe953f9d93c41cb27) accept4$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x100000) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r7 = socket$inet(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07021dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) 17:01:55 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:55 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113", 0xc6) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 598.938065][T17236] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240007001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 598.997629][T17239] devpts: called with bogus options [ 599.034206][T17283] devpts: called with bogus options 17:01:55 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x253000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1006c0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x20, {0x68, 0x1, 0x1}, 0x10, r3, r5, 0x0, 0x71f, 0x0, 0x3, 0x3, 0x1000, 0x6, 0x6, 0x95, 0x7, 0x1, 0x7f, 0x4000000000000000, 0x8, 0xced}}, 0xa0) [ 599.132704][T17439] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240009001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:56 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x100000) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000100)={0x27, 0x27, 0x14, 0x1a, 0x9, 0x7ff, 0x1, 0x57, 0x90207629065a9185}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)="5cea4e333314aedce0dc0bb02b853dd1aaf7036f50b1eafa1d5f688e74178a60579cb8150114a12f6845f129912f70ece5c22e319740df7abbcb5100326b0da61cab9fff3034143662290b77cdecea597c246c5af0bd4b2fc4e8a3927aea17f390830fc147d79e75c6b16e7c2a4b", 0xfffffffffffffdf9) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:56 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113", 0xc6) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 599.271161][T17591] devpts: called with bogus options [ 599.288899][T17619] devpts: called with bogus options 17:01:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x300000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:56 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670b", 0xc9) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="243809001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 599.500404][T17792] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(r1, 0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x3f, 0x9, 0x80000000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @local}, 0xe8f04dc5f598785c, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)='veth1\x00', 0x100000000, 0x40, 0x5}) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000a001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 599.555915][T17795] devpts: called with bogus options 17:01:56 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670b", 0xc9) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:56 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, 0x0, 0x3, 0x8}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r2, 0x0) r3 = getuid() r4 = geteuid() syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x5, &(0x7f0000001740)=[{&(0x7f0000000240)="af538681fa3556ce561b5b", 0xb, 0x7}, {&(0x7f00000005c0)="8b186e674b4b2b98a069a140cb79171eff17aa4b379864c0f1c4c1039ed84794dba64876d58000cae8a29de81c9ce552f308dbb7f8e0d2952bd109dda4d8dde5137e985aa23bcfeced16019e2d9fda741428f7eedcc4214de3bb85a72f9363cc92af1901ec1d603bcf309fb522d23693b355d124331c1c82417134ed47cfe63057b1693aede8328d14a4ec542af68244024e0f9dc81672576bca87bfce32ad08b911abefa58d943f61805663229508d281dee651874e64ccdd7e4f129dc49a9aacbeb9e8e1e99a8473798cf02e9f65117ea405f7f6d46f6583598b9cd19bc62d6d531097f252b00c08c0699f83dd7461dfcb93b6eb88daa05b446adb96182c7d91df8613beee4b003365d211925b9e9cbe831f84644d32a57bdf2ae4bc51cdd2f979aa04de990c1004c7b493e0e4c5b71dd1ee910e72035db536d6d1fcca79c62effb8063d35b27d8d2f405a8f8ed3fb457b0d0d712d9c2788a52b02b3cecf43ba0651891e4cb0071012ec1ce80f0e1f98e3af4b6cfac37de66e30cfea360999bdbfcd9e111e7698a6aecc24aa2f7378ab41c85cca71f7f4d5ec43611bdb64ff6f4ecb008fd361a21cc301fd8c214bcbd9472cdec07041f659804f9d3dab3ea45c90ade138dddf84f56f7e9c77b2968284334fcf42b5982212b415936c7cdb93eecba2ef25c0e8d17bb6515f1d4518dfa00c72e6f32e836c6fc28dbf544b6f9d53d6c4013ca3974940da8668bb9080be3a0e8fe0723177f2a0f4b242fd55624031fc67714bc212cc602c9b888284253a7520b5cbdcf1eec10f64236e5b06aa55bbad81a832d3bee329a82b17ddab1e004829340fd493510da0717898fb2bfd5e14b3e359589dc53c912ae6f77ccaecce5a64518921830ca2ccd2158af52fa3eac6e15985cb6dc4ac2084574c6ccf88fca19877c57ee3b4a269b08b71fc881486f6439c6b989a5de50ad68a7001f5507827673da7c4b121455da16a3191f0eedd7bf24919fb21ab1027f9357170733ef2f92db5e0fe545f21f6295cc56c5de3ee33ee6d3db87542adc6fe083f8aeec1dee2fd686b059818539c03761f92ca4dd1f14bfb1773886de5ecc626b0555c1df17c39274b50a06f74c88fec232c562a2c7cf3f771ca0db6ea6b2ce4e0e16366e1e436f45e45ba279526ebc86d2348b2938e86b7a81d8dfdf6827904a64bd06789214f636c300c7319289384c22f0a29afdfce3cf2fe1f94847373820af499c7bce2333747a68b42401cbb0fa348499de54805682f232e9311698165f56fbbe7c1bbb47268f8cfca7ae2f6555317e696b6fb5a9eb4fb316141d1aa0a1bffcf83590204510e9834c2e68b36d93e3ed0380b7e79f05cf375b9315749be52409f1087c02b3eb613bf9e927f57c81fa7790dfbb1c7ccc6ff74ed06cfc34d07f4dfd68e30fc4b37afb0691799095f241beeed302cadfdf83f673a34169e000341dd9627191d2abb88b47ec7653b63635b93017a82291b6028302564e3462c64d6c3d8af5fcbc33a26632fc89e81c0505dbdf654ac87261a1e2d8ca34c784be6b23b28529f016cabd6a1f96db90f3859f2bb6ebb5fe551a00fc856b4f4aefb3f53b0c863be6fafaf247512347825b5805f56daf8b84aa58209b857a36cb74391276e841206fdd0452011f0a3768cefc1fc1910a36f3c5da43cb6b3f3220e0e33ff35e6dee02f6a73484d3e01b249420546fd2e970de55daaab5e715310712d55082b9f9370d00312df001786036cd3b482e48ad6681ab00923d86cbe16d6a335ef2f76af94288c4baab31657b75b34498f0965cdd2cc67e3d20c9574ee247a61196c6715976a54c2a960ac97d681cf92f430ba111a633726dc34c5a6c09bacd3d79a85fba8370a19b488511c8d400c98c2bab10c9dcd097baf6911f6c7a7c14a3f1e9bd85215f32bb2378128a6c397ddb0000d199e9a18df334386e633dfbf8db60faceaf48731a2407e3c1f44e1d128957edd4457b6e07abcdb5f7e615d0697e3c637bf2eada8ea3d314e7e8e352566dada011298bea6eed21e07721c7a333b9164a231f3d2a88eb1b0d0db87a7d13d3d29e5c6ad1c226892dcd1b1743553379f0db910cb442c0335ed9f8d0e1f14769ea511e798d9002641721280076962436f69a5458bdb83a8d8ee524fb56c2abb1b85e6720932dc887c0bf4e801c1763419136367d123da001894f320aac762b9315278e68e88c64837629104e194d30f3204b87b3c58194ae67bc645fd89ba544ce49636c274fe098da28f21e0da4701779848e108e804b82c1981aa0027cbdd392c4ec785500d3292ec6b97c6a7c6d9ba47282637c956a094b20bec2196431b21b78a2e1310e75ad266e320667046a8eb6e2d3d101bf007deeba3feff21ad6354d91be44655c7c718cad49bf6da1bd7a2022da11305697c8fcc8cc08255d325f7ff1f02174472b8560864c58983e624ee068ca3355dcc46dda5114ad729b6b38d7906725a70c736bc8d900b4552b13ce423b817e5681e21373115880cf72a5f5c800c1481e87fbf5f8be2755dc39f2af00164c6a273a524d6ba0da73244c7bd3147ab704d2fcd855e8ae70492d81c6ae4d0e5e8b6919ba5494ee89571b44856f3bcda2095ed623d235239dc1ca1bea983c3932a5f4fc0a9bca4f9477d1424d70adc651bad70ccd6c5c18e6fcf7a88e54aa141e631da12b6923f8441199639ba0a755942896eef33d45a58cb88ce6a1ab5a6b232661e299ce323837161720809629c7bcb0a1a97a071efe26ba5c16cec82efb26df93a8079fe99f27b5e8eb8ccd8af1ccc3b2ce59dc016b2bfa041e28a35a3ea148a48e6b3369328a9a75bab7ca2cb4ae35916d788223c2372a7ddc09979c538351f035b04680b0b1f416bb98b16e63651d58b57f13f3fa432024033bcc3feb2ffe72a7731702f66691c2f01dc53d5c812e3c4db3801a86c81dc867b66caeb5876b479330273fd17f624a74ebb10f5b87dc1b6b7dc185bcef0ffd3f8b8bf990166fb19953a2b76a1ee49465cda2f6a359d5c3bd83cb5b18dfa08f4493eeb6e44373e8770e56bb8e239373133ba38c287d06ff8234919244465d6eda56cbfc2f0969aa3b9d6ae9b9f56544222b6ff4bdd74a76527b73f7245634ca97380a2ab7e83b40fd2c3b9f299e292719ea519d0b738bd076c13666a31b9222468721300d6539592cd7a4fcb03d356e35c0441bfd2fe2472a2b81a1ab38e19ed0396ebd0085bfe4a1eb574c63a23935541157394aa7f8ae7ca73cf3da602f95c435b8e44874a563e08e6bdcc002687d6652abce201c9445ae2cd3ad5f4efec0354efe2df79fd6faf0bb9dd12f243ab933909e0d15db3e77bb0ef9004095d48d5e332dfc80c9ee6e0d7ef0e2de3dbe729335439ccae834e7bd9f5c60eebffb1e8714ddb9331d7110260aef7c258bf3fcfb17b8596de91660c0dcf6f52bd7411549c178a1dab3e610a9d6c9701bab51a1f4399299ae28683fde0dc28e878bbf813eca67a93753cc4670fe35c38b9c27770807e5d07c62bf480e698844861685c1b56e8465bb7e912cfbdff53eaac4a4f5cdf72e86c4260c185c6a2d5a8978ba2c0fd12aaf4f1381c4d0f85dc9d8b150122f76633669b137596ea8fa45631e0e40042c3042501a3b90a61c90cc2b80491b2281b0baa10c3763cdbc8fc708ba0686a609acea6f68b112b0e1961627e9c4b9880f6bb2dc3d31446382df601859a206c2cb3cf19067db6428018fa9b244ac80261fa181519e1293ed2172eb25fe61b1ae6f653eccc95aec6ad49242d78082fb3c5c422a3a6149ced3b625664443546ba367c66dd0c930b990f81cd8749e11b5f0fad0d439b6df519e7b5c766f2b98912d803332a00de9f19380c52cad6c10255ed1b10b030d2789ca4c494e933c2b7c1ae6beda13f05b3656651516781989a8fd58eaace2b26e13519d723974f8337f5c99f34d802dd037b5c743d74ffeccdc477fd5d8869989e43054ef82200d7be74a39912b1ea50224859a4813e38c45182a65b94bc5ebfab261ec7333e7bdb29f9243b1ce1fea65643b62b940044e283c46ea259a0a51bfdb4e3283314f198894f2e6bc7c488c21d32fcacf3312419f06281a0477998906480b54f56a19e1ea60b5df03fa05f7020322490e32fd9e7bd8045a3d954b610f09194e71e191d650c83a2a8a49ca115c4a8a6197549a7efc87fc4164dc490f40fbb899f85d6e592b6ff92ef7519e1824dcc08f5e3ab41d9e3bc6611cfe1ae4f5a790efe1a3eca88a973a2c9af428742d5d84a9c87eda97292693c3401cb33a512c135d5a30edb92ed37a760ac550c8d317fa2b0d9de4c69a27a8ff239175f86dbe457845cb530f7ffba6af190d3c52d00ad276186b2e578473ef300a1d9ddded108e0deece3a795dfa86becb64ba5718f682571b2e088cb37096b0da85f42c02c1ce58bd32b8be6a281d719964bd9c1690c39c0c6be29f2bb81b562d263d7fe5808c2a10325110819322586c6491c529ac54ac2120ea52fd0cf27699a4f63d5acfbfb21006fcf41511e1b144ad0e0c83bfeaaf54a9db568fd8c7a5dd5686fb65cfcd69c1afae4c85bf53293305341473690d4843ba920ad9418f9ab048ffb0bc020e437a843925df4c9b3bafe9c765d1507c2332c9246f93b6e38c56d5556242f103ba100cb22ef2dc9e5a2120e5f3f3f2142025deceff7f1fce4b4a348c201a618346a16cb97d57c7a7ec21d39f5ff9f13f0aa4f3376334dedd67ba1c1a63dc9a471bc4ab9749c3af6aae0a2e0de9044375931456d7c4225b43716bbe27286a6a84049080163bfc100a8a0e5ab3c463b88902200d21759ab1a7f34a100e478056e5a31e3c796e8675e1ac813bcb3f946b2ac43e03ce9638bbf8dba422408c778b98d7e008de9cf28f50a434b99f6b9196327902144525306bfc075b5efebdd7c1f27de0a3b363fb72cf841215e2a8de858a9c9cd3e13d42add957a0cc8e4a6c7ece02a25d9c7c7b9f108394b63ff1b3ee5b0c866812a4fde3a6c8c0eb4ad66eea9efe14c4af7537cde16dc610f6b1bccd629b0eaa7bbea6ff1df3366a2026ffac8c0c8d8427fa6f684ec5ace85ca10ceaf0d181558a47a92e28c4ea3cb895078ae120ae819bc1fa6efb686bd29037b161441f9a9f32c0705762bacacd685f151790dfd3f20006979cc14e36bc76fa40549581927556b063a51f2e1b74531172a930dedd831ca1713160c0f08662de4252ccfe1e3c840de275a5fbba1f09b84022690992788d1c80bf6ac4406e79597309d2a3f5e885921d89402b3a28d5923d6ffeffabbad2af5d5ddd857c08fb054eab5e0ed9d332df1c06d8ecaa4f95c8396abfaadefdf472d0650635bc3291a7e6c12aef239cb099896e05ba388af39ac173907b03836c37b6ef94eb65cef7ce965999e3a7f02b2f4dff73cec45d1c5c718a27344aace6f16e0a2850f87a8e939ffcf4cfc71f9f013bef02ff0e9ca908b30b3e6b65ba8b59944459d8aea1a299e583be13e9c2f12f88edfb524dc144e338c51b541c4cce35ad0eb183dbb0c15c412947b6aea2e17f2665e81b72c2ec915bc3ab36fe4bf2be780b8130f1bad44d12b1b3d5c214e641704ea91aed1aea4f78997e9199b58657ad4d13b019b8081dfbc5c57d507a3caf67c430c6726786e3c3f71e73341c2481b228134e85edfd494ab6622efcdd306d50f54127a57a507b6c345e7c3b5331c9450db36a28758f3a23542eedbe9d842d2ed930aa580ccf19238f990af80239a318da123a63d7f6953103ec928f48a8ac93a2f6e03a648cdf8", 0x1000, 0xffffffffffffffff}, {&(0x7f00000015c0)="20d8385e4b705fae20c26c4083bea29af4751c91d86b4fb125dff971d539c1a905c7297a54e9e6cf70e07b4d3785f894d3b1d1ac3e97811848471c2e8894828fd6a4bc173347301a0ab601a0e87fb7524cb01f7fe0be7b108dd35c54ad69d50e7652b8503df63f98c5ca", 0x6a, 0x9}, {&(0x7f0000001640)="0d06b7dba4fdbd7f3d252675dd6d0b07bb704fd7d529bb0cca90920dc75f6bf0ff7ee8d72171d359c95a97f6070d44c39027782f961d7485988a0f89acc8836c1562eb2d90f7fe27b954fa2097ea1aeb1c641ae1858a2ce29226cb8cf51143efaf96d79222dcf5c9c6dc1563baa04ec999d8108d156421306339ee37d94473c68f55c53396a23f52ff3985d51f805fa713872f92569db7aee97a14dca3a603d8afa3dd57a7f3f5591a6f5b20caeba8eb57d0e0bbf3eabbc4d4d2333cded15889606bb22a8d96fe087791", 0xca, 0x3f}, {&(0x7f00000002c0)="9bba80e6b1e7819b313b886286129101e9f90e48bd7dfaac6e589697f4d1c0a628c9f77adfd9cfce4d9d7d94fea5", 0x2e, 0x1}], 0x4000, &(0x7f00000017c0)={[{@nodatasum='nodatasum'}, {@datasum='datasum'}, {@subvol={'subvol', 0x3d, 'Cppp0.#@vmnet0wlan1'}}, {@fragment_metadata='fragment=metadata'}, {@noflushoncommit='noflushoncommit'}], [{@permit_directio='permit_directio'}, {@appraise='appraise'}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise_type='appraise_type=imasig'}, {@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r4}}]}) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400, 0x0) getdents64(r5, &(0x7f0000000500)=""/167, 0xa7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getrandom(&(0x7f0000001900)=""/11, 0xb, 0x2) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000b001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x400000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x24042, 0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(r4, 0x400443c9, &(0x7f00000000c0)={{0x0, 0x4, 0x1f, 0x5, 0x5, 0x3}, 0x3}) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$inet_sctp(0x2, 0xb7c7b713a70af7a6, 0x84) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={r9, 0x6}, 0x8) 17:01:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000c001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 599.765735][T18016] devpts: called with bogus options [ 599.773871][T18021] devpts: called with bogus options [ 599.782792][T18025] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:56 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sendto$rxrpc(r0, &(0x7f0000000080)="549f", 0x2, 0x4000004, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x1000, @empty, 0x4}}, 0x24) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:56 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670b", 0xc9) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x1, 0x0, @mcast2, 0xfffffffe}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$RTC_WIE_ON(r3, 0x700f) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000e001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:56 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x500000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 600.053887][T18350] devpts: called with bogus options [ 600.124525][T18372] devpts: called with bogus options 17:01:56 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x107d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$sock_void(r4, 0x1, 0xbf2b05278f5a848e, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000003c0)={'broute\x00', 0x0, 0x3, 0x0, [], 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f0000000340)}, &(0x7f0000000440)=0x78) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x21c, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@sa={0xe4, 0x6, {{@in=@multicast2, @in6=@loopback, 0x4e20, 0xfff, 0x4e24, 0x100, 0xa, 0x0, 0x40, 0x87, 0x0, r5}, {@in=@rand_addr=0xffffffe1, 0x4d2}, @in6=@mcast1, {0x12a6, 0x5, 0x1f, 0x10000, 0x1, 0x10000, 0x7ff, 0x80000001}, {0x2, 0x6, 0x8001, 0x386}, {0x9, 0x4000000, 0x82f9}, 0x70bd29, 0x34ff, 0xa, 0x0, 0xde, 0xfd}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x21c}}, 0x0) 17:01:57 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf440", 0xcb) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000f001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 600.197038][T18393] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 600.294566][T18456] devpts: called with bogus options 17:01:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) fadvise64(r0, 0x0, 0x6, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$sock_void(r2, 0x1, 0xbf2b05278f5a848e, 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$USBDEVFS_RESET(r3, 0x5514) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1840, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x600000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 600.334017][T18575] devpts: called with bogus options 17:01:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240011001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:57 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000500)={0x4, 0x1, 0x1, 'queue0\x00', 0x80000001}) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef01000000000000000000000008001d0000000000480001006d643500000400"/234], 0x140}}, 0x0) [ 600.420186][T18600] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:57 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf440", 0xcb) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240012001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x700000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 600.584966][T18815] devpts: called with bogus options [ 600.623966][T18846] devpts: called with bogus options 17:01:57 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@netrom, @bcast, @remote, @null, @netrom, @netrom]}, &(0x7f0000000100)=0x40, 0x80000) bind$rose(r2, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) bind$inet6(r4, 0x0, 0xffffffffffffff3f) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r10}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000002c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x70, r10}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000f7fadaf104f0ad8e241d0000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a377fa0b27940cbf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d6435000000b4394b0b3c16540000000000000000000000000000400800"/240], 0x140}}, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x1639, 0x1, 0x4, "616851c601f34226779e8836d4d5f5b8db3ba826e571631ed7a056e4b09ef0f6", 0x32314752}) [ 600.722334][T18936] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240013001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e22, @loopback}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000000c0)) [ 600.861139][T19039] devpts: called with bogus options 17:01:57 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf440", 0xcb) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240014001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xa00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:57 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = socket$nl_route(0x10, 0x3, 0x0) accept4(r2, &(0x7f0000000200)=@ipx, &(0x7f0000000080)=0x80, 0x81000) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newsa={0x210, 0x10, 0xd018c736f83d3181, 0x0, 0x0, {{@in=@rand_addr=0x8e91, @in=@rand_addr=0xa9}, {@in6, 0x0, 0x33}, @in=@broadcast, {0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x20000000000000}, {0x0, 0x100000, 0x2}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8, 0x1d, 0x401}, @algo_auth={0x118, 0x1, {{'md5\x00'}, 0x670, "000000400000cd75ae1b1f153edc6a1507000000000000006abd9cd6196c0c018c3a65d1cc0a2a6422f149b0df9a9a51721524bdfcaaafe414baaa45e30cd2c90d1c3d0dcbf92044caa4547b0f4dfeafc0a384770be7ba81764c81fe4b51c7be77e73408d33890d6ecbe712cb33c7328934003481c5d0c1c7f904d48394ecc4ccec7a0f5b3578c82ae5640a1946f572e1165ebb8f5f38e6887ec5ccde487f3efce25dde7c1fb6e7f1e1542c9ede7897f386d45848c70e18edeb2b0935a2b852433a13cbdf2d480d7aa5ee0c0ddd9"}}]}, 0x210}}, 0x0) [ 601.011057][T19146] devpts: called with bogus options [ 601.051328][T19150] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:57 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r4, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 601.092201][T19154] devpts: called with bogus options 17:01:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24001e001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:57 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:57 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000080)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@rand_addr="54407fb300000000c00100", 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0xfffffffffffffe07, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 601.141508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.147394][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 601.215693][T19323] devpts: called with bogus options [ 601.255622][T19371] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:01:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240020001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:58 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r4, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 601.298940][T19372] devpts: called with bogus options 17:01:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={r8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r9, 0x1}, 0x8) getsockopt$inet6_buf(r2, 0x29, 0x19, &(0x7f00000000c0)=""/231, &(0x7f0000000000)=0xe7) sendto$inet6(r1, &(0x7f0000000080), 0x4c60457663715f28, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:58 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x40381, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4001000010001307000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c100000000000000000000000080000000000000000000000000000000000000000000000000000000000235000002000000000000000000000008001d00000000002b00010074677231393200"/248], 0x140}}, 0x0) 17:01:58 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xe00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 601.443986][T19477] devpts: called with bogus options 17:01:58 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r4, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240938001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 601.571358][T19519] devpts: called with bogus options 17:01:58 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 601.649573][T19586] devpts: called with bogus options 17:01:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240040001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:58 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xf00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:58 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x511000) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000100)) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) listen(0xffffffffffffffff, 0x3) ioctl$PPPIOCDISCONN(r2, 0x7439) [ 601.858780][T19717] devpts: called with bogus options [ 601.892361][T19719] devpts: called with bogus options 17:01:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240048001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:58 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:58 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) sendto$inet6(r2, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:01:58 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x1000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24004c001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 602.145997][T19948] devpts: called with bogus options [ 602.164689][T19950] devpts: called with bogus options 17:01:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x420000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1000006f3) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) epoll_create1(0xc0000) 17:01:59 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:59 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="246558001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:59 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 602.413400][T20199] devpts: called with bogus options [ 602.503390][T20230] devpts: called with bogus options 17:01:59 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) 17:01:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r3, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:01:59 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x4000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240060001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 602.704632][T20390] devpts: called with bogus options 17:01:59 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) 17:01:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="245865001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:59 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r4 = dup2(r2, r3) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xfffffffffffff001) 17:01:59 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x4800000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 602.898058][T20602] devpts: called with bogus options 17:01:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) [ 602.948671][T20608] devpts: called with bogus options 17:01:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240068001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:01:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDENABIO(r1, 0x4b36) ioctl$VT_ACTIVATE(r1, 0x5606, 0x2) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r3 = gettid() tkill(r3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000600)={0x5, 0x70, 0x7, 0x80, 0xff, 0x8, 0x0, 0x2, 0xd1012, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f00000005c0), 0x5}, 0x1, 0xf4c, 0x2, 0x6, 0x8, 0x408, 0x4}, r5, 0x6, r2, 0x3) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000440)=""/78, 0x4e}], 0x5, &(0x7f00000017c0)=""/196, 0xc4}, 0x1}, {{&(0x7f0000000540)=@generic, 0x80, &(0x7f0000002ec0)=[{&(0x7f00000019c0)=""/86, 0x56}, {&(0x7f0000001a40)=""/96, 0x60}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/67, 0x43}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/137, 0x89}, {&(0x7f0000002cc0)=""/233, 0xe9}, {&(0x7f0000002dc0)=""/66, 0x42}, {&(0x7f0000002e40)=""/124, 0x7c}, {&(0x7f0000000340)=""/52, 0x34}], 0xa, &(0x7f0000002f80)=""/63, 0x3f}, 0x1}, {{&(0x7f0000002fc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0xffffffffffffff04, &(0x7f0000003580)=[{&(0x7f0000003040)=""/133, 0x85}, {&(0x7f0000003100)=""/198, 0xc6}, {&(0x7f0000003200)=""/171, 0xab}, {&(0x7f00000032c0)=""/79, 0x4f}, {&(0x7f0000003340)=""/69, 0x45}, {&(0x7f0000004d00)=""/172, 0xac}, {&(0x7f0000003480)=""/235, 0xeb}], 0x7, &(0x7f0000003600)=""/41, 0x29}, 0x4}, {{&(0x7f0000003640)=@pppoe, 0x80, &(0x7f00000048c0)=[{&(0x7f00000036c0)=""/215, 0xd7}, {&(0x7f00000037c0)=""/239, 0xef}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x3}, 0x9}, {{0xfffffffffffffffe, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004900)=""/183, 0xb7}, {&(0x7f00000049c0)=""/112, 0x70}, {&(0x7f0000004a40)=""/107, 0x6b}, {&(0x7f0000004ac0)=""/126, 0x7e}], 0x4, &(0x7f0000004b80)=""/52, 0x34}, 0x3}], 0x5, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000100)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000, 0x0, @rand_addr, 0xfffffffe}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000004dc0)=ANY=[@ANYBLOB="400100001ad2e13a8ac4aea37edb131000130700000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000005146bd3016b1a12573114ba20765129493d45d1267f629da4a5be36296f48f38faf887a264190cdf4e32d14522a361a4afb75d202c6c425b60a9d0c125ec86ac068bd3020784a5a4632783f01b3f2e07a8ecde4e41c600000000f3dfdd93933043634ff07048d8f01853c372f15265e5b177018e7fee30886f421fd60390a845162b88d62cee", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000080000000000000000000000000000f1ff000000000000000000000000000000000000000027dd36c300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065681450407bc6a3eeab0000000000a96b601a52173da1c30848b4d671000000000000000002000000000000000000000008001d0000000000480001006d643500000200"/262], 0x140}}, 0x0) 17:01:59 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) 17:01:59 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x4c00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:01:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x9}, @in6={0xa, 0x4e20, 0x9, @empty, 0x9}], 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r3, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r5 = fcntl$getown(r4, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r9, r0, 0x9}) 17:02:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24006c001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 603.279143][T20930] devpts: called with bogus options [ 603.281164][T20926] devpts: called with bogus options 17:02:00 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/55, 0x400000, 0x800, 0x8000}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:00 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 17:02:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240074001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:00 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 603.464201][T21040] devpts: called with bogus options 17:02:00 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0xfffffffffffffe96, 0x0, &(0x7f00000000c0)={0x2, 0xfffd, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r7, 0x0, 0x20, 0x400, 0x2}, &(0x7f0000000100)=0x18) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="31b9d6ef6285e6d44262e94c148cbde1db86b89365c3c74b3b", 0x19, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@rand_addr=0x3ff, 0x0, 0xa}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x164}}, 0x0) [ 603.560545][T21087] devpts: called with bogus options 17:02:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24007a001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) kcmp(0x0, r2, 0x4, r1, r0) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 603.669158][T21196] devpts: called with bogus options 17:02:00 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 17:02:00 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6558000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:00 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000080)={0x692, 0x4, [0x1, 0x4, 0x0, 0x80, 0x52], 0x2}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240081001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 603.838666][T21261] validate_nla: 8 callbacks suppressed [ 603.838676][T21261] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x100000000, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x3, {0x0, 0x0, 0x1000, 0x2}}) r3 = getuid() r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r4, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000100)={0x90, 0x0, 0x8, {0x2, 0x1, 0x8, 0x0, 0x10000, 0x9, {0x5, 0x100000000, 0x1, 0x8, 0x7fffffff, 0x8, 0x7, 0x0, 0x4, 0x5, 0x0, r3, r5, 0x1, 0x3f}}}, 0x90) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r10, 0xff00, 0x8}, &(0x7f0000000240)=0x8) sendmsg$nl_crypto(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@del={0x130, 0x11, 0x400, 0x70bd2d, 0x25dfdbfd, {{'pcbc(aes)\x00'}, [], [], 0x5e8fdf3416dcd9d2, 0x2000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0x9b}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0x80}, {0x8, 0x1, 0x8c}, {0x8, 0x1, 0x81}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xfffffe0f}, {0x8, 0x1, 0x1}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000280)={r11, 0x2}, 0x8) 17:02:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400f0001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 603.943905][T21376] devpts: called with bogus options 17:02:00 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) write(r5, &(0x7f00000003c0)="d0ea838b28920ffc6fcc268c2615c469303f2ab01a79e074ba362b8fee5319743f420aed33963cf7f8303768d9221e3b3a95bcab91ab02b0018b0bfeddfb48fd06ec7e85a542962856068fb8e7f91156ca44be22b8aea166a9fb11d2a48ef81090aa828aed29796ea69e87a0d2ff2f1dab021e3684fc3876121ff335c2ecfaefe13701745fe70fe54bd252daec25dea3f3442e589bc22fd98a5dcb7e3c87b5a56177c182b8d68bfa442c89954739dd0357dbd237a79f90501c90eebf6bdf410ae6752ab4c113fe670bf4400c", 0xcc) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 17:02:00 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() arch_prctl$ARCH_SET_GS(0x1001, 0x3) tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:00 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6800000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 604.130831][T21485] devpts: called with bogus options 17:02:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2403ff001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 604.204209][T21572] devpts: called with bogus options 17:02:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) read(r0, &(0x7f00000001c0)=""/96, 0x20000220) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 17:02:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001f00210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 604.252484][T21593] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x50001, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:01 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0x5, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:01 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ptrace$cont(0x9, r2, 0x9db, 0x7) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 604.432140][T21714] devpts: called with bogus options 17:02:01 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6c00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002f00210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:01 executing program 1: [ 604.554239][T21919] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x56, r2, &(0x7f00000000c0), 0x4, 0x1) [ 604.618611][T21920] devpts: called with bogus options 17:02:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004000210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:01 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000001800), 0xfffffa0, &(0x7f0000001880)=""/134, 0x86}, 0x3}, {{&(0x7f0000001940)=@nfc_llcp, 0x80, &(0x7f0000001b80), 0x5, &(0x7f0000001c00)=""/79, 0x4f}, 0x3}, {{&(0x7f0000001c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001d00)=""/4096, 0xfffffffffffffeda}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000003d00)=""/104, 0x68}, {&(0x7f0000003d80)=""/70, 0x46}, {&(0x7f0000003e00)=""/87, 0x57}, {&(0x7f0000003e80)=""/191, 0xbf}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/232, 0xe8}], 0x6, &(0x7f00000050c0)=""/11, 0xb}, 0x80000001}, {{&(0x7f0000005100)=@x25, 0x80, &(0x7f0000005440)=[{&(0x7f0000005180)=""/63, 0x3f}, {&(0x7f00000051c0)=""/226, 0xe2}, {&(0x7f00000052c0)=""/121, 0x79}, {&(0x7f0000005340)=""/240, 0xf0}], 0x4, &(0x7f0000005480)=""/126, 0x7e}, 0x3}, {{&(0x7f0000005500)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000005680)=[{&(0x7f0000005580)=""/196, 0xc4}], 0x1, &(0x7f00000056c0)=""/217, 0xd9}, 0x401}, {{&(0x7f00000057c0)=@can, 0x18c, &(0x7f0000005940)=[{&(0x7f0000005840)=""/78, 0x4e}, {&(0x7f00000058c0)=""/111, 0x6f}], 0x2, &(0x7f000000aa40)=""/4097, 0x1000}}, {{&(0x7f0000006980)=@can, 0x30, &(0x7f0000008b80)=[{&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000007a00)=""/149, 0x95}, {&(0x7f0000007ac0)=""/173, 0xad}, {&(0x7f0000007b80)=""/4096, 0x1000}], 0x4, &(0x7f0000008bc0)=""/219, 0xdb}, 0x2}, {{&(0x7f0000008cc0)=@nfc_llcp, 0x80, &(0x7f0000009f40)=[{&(0x7f0000008d40)=""/223, 0xdf}, {&(0x7f0000008e40)=""/4096, 0x1000}, {&(0x7f0000009e40)=""/239, 0xef}], 0x93}, 0x8}, {{&(0x7f0000009f80)=@nfc_llcp, 0x80, &(0x7f000000a600)=[{&(0x7f000000a000)=""/60, 0x3c}, {&(0x7f000000a040)=""/230, 0xe6}, {&(0x7f000000a140)=""/71, 0x47}, {&(0x7f000000a1c0)=""/175, 0xaf}, {&(0x7f000000a280)=""/22, 0x16}, {&(0x7f000000a2c0)=""/102, 0x66}, {&(0x7f000000a340)=""/235, 0xeb}, {&(0x7f000000a440)=""/38, 0x2ea}, {&(0x7f000000a480)=""/183, 0x68}, {&(0x7f000000a540)=""/137, 0x96}], 0xa, &(0x7f000000a6c0)=""/197, 0xc5}, 0x68}], 0xa, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:01 executing program 1: 17:02:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006700210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:01 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x7400000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:01 executing program 1: [ 604.877907][T22034] devpts: called with bogus options 17:02:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) close(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x100000000, 0x0, 0x1, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x381a, r6}) [ 604.954928][T22083] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:01 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) waitid(0x3, 0x0, &(0x7f0000000200), 0xf9bd6ed5f9bd1676, &(0x7f0000000500)) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='fuse\x01\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000010001307000000000000000000000051c58e40cd14893bc9a756980000000000000000000000000000000000000000000000000000000001ffff00"/76, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:02:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006f00210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) 17:02:01 executing program 1: [ 605.165579][T22251] devpts: called with bogus options 17:02:02 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x7a00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240002001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 17:02:02 executing program 1: [ 605.376556][T22496] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:02 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x6, 0x5, "ec33c25f4fbc8b6e045b024f8d2d9369ef07e6d5e9f7a87a22d89e4275b2e202", 0x736b1d}) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x29}}, 0x13) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, {0x306, @random="93bf62035209"}, 0xd0c5487e6a6e69ec, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'caif0\x00'}) sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='yam0\x00') ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) 17:02:02 executing program 1: 17:02:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240003001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:02 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x8000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 605.668612][T22767] devpts: called with bogus options 17:02:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f00002df000/0x4000)=nil, 0x4000}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240004001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:02 executing program 1: [ 605.773343][T22825] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:02 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x82100400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x1002, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000080)="5d3ef2013f90f14237015abe14672ce414da029216488306fb6d06da5e73c94dcdb8b3ead1ed6d7f2d51baea8d99086cf264a3a3c6ed70fd", 0x38, 0x0, 0x0, 0x0, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xd, 0x86, r5, &(0x7f0000000500)="0abf01fdfc1b29a93c3b3c5be636f7c45037b5da598a3b9b5bba594b455a427621b3d821ec4c939ac5112c890b456bcecf7c86efc5b2373d7336724fb4fd0b87d3a88d8943824c8adb347d14f88ecd4f6567874456ac89bba75bb5ae207cb18eccb2ae73dccd5518de060030d5a5507f915d984fbbab6bac43579708ee9d9b9cf17f4f370a13e4a903b697139444c8ed908d47e8fc0a70751ec84e53a42821a1191ed8e19d95f47bf0cad930368e55056be1b1e24380e651cc6228392e3f2d6374c24910de77", 0xc6, 0x7, 0x0, 0x2, r7}]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0) 17:02:02 executing program 1: 17:02:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240005001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:02 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x8100000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r5}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@local, @dev={0xfe, 0x80, [], 0x24}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x9, 0x3, 0x100, 0x6, 0x80000, r5}) 17:02:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001700)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xfebd) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000003880)={0x0, 0x6}, &(0x7f00000038c0)=0x8) socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b17c) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000005200)=ANY=[@ANYBLOB="04f30008", @ANYRES32=0x0], &(0x7f0000005240)=0x8) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) r15 = socket$inet(0x2, 0x4000000805, 0x0) r16 = socket$inet_sctp(0x2, 0x5, 0x84) r17 = dup3(r15, r16, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r17, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r16, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r17, 0x84, 0x7a, &(0x7f000059aff8)={r18}, &(0x7f000034f000)=0x2059b000) sendmmsg$inet_sctp(r2, &(0x7f00000053c0)=[{&(0x7f00000055c0)=@in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x18}, 0x200}, 0x15, &(0x7f00000015c0), 0x9, &(0x7f0000001680), 0x0, 0x8000}, {&(0x7f00000016c0)=@in6={0xa, 0x4e23, 0x8, @local, 0x6}, 0x1c, &(0x7f00000037c0), 0x0, 0x0, 0x0, 0x40002}, {&(0x7f0000003800)=@in6={0xa, 0x4e20, 0x9, @rand_addr="23e72a1bcd824f976728c692760cfb02", 0x81}, 0x1c, &(0x7f0000003840), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2000000000000000840000000200000e010000024000000004000000d95940570cd437243b15a21ce7e4b1eee72473aa2ad257d633aa52a6e5db898fd526e511efa75109eb1a23fdb13521236a25ea0e0a93c30a34a82fc78282e6d81c3c7b40addd55e71a40c7889e7a8be6f5912e3e4dcf9da9340a846a4ed7e6e19cda6583494caefb2c16b4be167d944ce6a0aef151d15b7986a835ce23ba0558f779777cf9a4154204512fad30baa6ead99e4b6e9287b6f064ae538f0313b106b8ce936c7c45a10e0acccd0e09312cbb91a5db1154284e84d24c8bff6e407eb4bb804d5b8f0903d1691d4d81dc5e93a566260bad6c300cce8a", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000200000000010000069ffffff00000000840000000500000000000000ffffff7f1800000000000000840000000600000000000000000000001800000000000000840000000500000000000000ff0f0000c700000000000000840000000100000007000000000200000600000007000000090000000008000000100000", @ANYRES32=r18, @ANYBLOB="20000000000000008400000008000000ff02000000000000000000000000000120000000000000008400000008000000fe800000000000000000000000000023"], 0xf0, 0x4000001}, {&(0x7f0000003a00)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003b40)=[{&(0x7f0000001a00)="9ca2ae58d9baa08275c5087cffe1d6e3afcc83a1923974d35f8ada94e4d8c028c8a4e99fcbd35fc08fdd4020a83c5885a266c7e188d8ed57066e571629c5615ad31bf7848fafe9762005918c5f9b546296caa5d0d69aedd614231dc4ec2fed1a4d0844eaf8f2a4702c609e55b1ae12587ab53bd348b07294b66fbfbcb99b3dd7c7bb25d19bbb78213233f185149c227a27bde6331cc1260ae1988efa161899df5ee0ea47a029fd843d811d94d4e5aec43948939f1ccbe49c382df9a790a4d923e28b73952f286a4e5802baf3a90648348b57254803206453439b2affa37dcc718632267dba592fafa3489c10923fdd01564e92fa9c59415437ecc3ca67d831d6c49dc6cc168fef6489bc29376cab734c557eaee6f98b7a67bb87d770db86d20a5a66f486eb70374ab3125f39b6d39d19cb12765d6d4f760a5b6774feb9db7df8c0eb23ec4aa8fd4262d41591f80767f9c049aab581911fb279176eaf2a660bbb2700000000", 0xa9}, {&(0x7f0000003b00)="d2839aeb42dfe8064ee1e7d14a", 0xd}], 0x2, &(0x7f0000005640)=ANY=[@ANYBLOB="18000000000000008400000007000000ac0000000400eedb5900"/43, @ANYRES32=r14], 0x38, 0x10}, {&(0x7f0000003bc0)=@in={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000003c00)="1f05d953a3ad46bd8cd07a720284194a88758e980337708481bb4989c258ef663f797cf3b3a89debf93b2d1661e5137eb4334b1fbe0aaec093bb26dade1d87264d10581aa9bbb4873efe2d4920b6ceba282dd3bed81efa4cc2c130ebdf433e77fb904ee052ae7d9e6f608ab0257bd6a351bed584d9a381b246737010dfba949b2698f8", 0x83}, {&(0x7f0000001b80)="4e33c06f3cfdd9ba66afed976555a845a8a78c47ca08e1d5649c67dccd701764bb364c8f92c556fcfed3bd627e71460cb4d9854deccfdfb3b3139e86541f0148c62f10d79c1b1e8ff6ea5c9e02fe83411a2166ecd046a4b1618af5b06740aa179d1ecbd413a02918278b86a91c92eb11e73dd5562d", 0x8}, {&(0x7f0000003d00)="e5f395ac7950223cb36b744b10659697ead2218bfdca495a7a1d816247ee91f846e7889bb70d688eccda7d44bb726563b54e004f", 0x34}], 0x3, 0x0, 0x0, 0x20002}, {&(0x7f0000003d80)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000005180)=[{&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="d0e4114ec4c737b48c63e06232a181870a23c646d1ad83750c707c9db38c61bd9b501c4693ea7ae191108279", 0x2c}, {&(0x7f0000004e00)="0e1eccbfa4d41e7df90332bc849ddf64b839b94c4a8ca60412318fb1abdcb9e35451dbc544dd07f48d393786d81de795698583d31db80649455c1fc7a5561f8bbbb368c0781709b8441159e63c20fdfe", 0x50}, {&(0x7f0000004e80)="12dd015a34e1930886fb8af72ceff3e02ffb4800d27a46f6a515a4e5b2b8ad456576781d59952ac6043559242eea1e83ac97d6404e2db380430544b0eb298936cfe0e7134dcdd14c42a17c74a5ee29c5ee88e9e29bee64d993b87bded085de4af72d2086d4928eec2173f3451f09777f95bca31ba5e505e1d5378d4bd8bf5ca6cedd2e450e6642ab41f83c93df5e96c02b8b69cc602201d8b19b2f6e19df942d18b5af902caabf319c4c4ba85bbaa22bead8ea6f673204e832b4912a9bfebe3099793f573b83589fc6", 0xc9}, {&(0x7f0000004f80)="8a8e7549b481442deee85e893aae43375d1a14313ae50a5ea07c482acb1bfb3c7bbda2bb0ad4025066582dd8052f409b0a08669b294dfb05ad03687c0be291433b90a17cfaa49b2cec69188cbcb82510720cd7a9079e135cce22c90436a9519394f2452c9bc4eb4667ba74f57338b7de566a69b2f70c7f8276bfb0", 0x7b}, {&(0x7f0000005000)="e8ace0cf40beaa15aad487872256a39ae8c4f72243d05ba9090001b064d938d2a84d3fb9aeda4154396f58c0ddbb95a4a2ffd6aa0f22355df0ab31f9f1ca7a0cb486fd7a5c37513172dfa557057d3b291e54f8bdd78aa919d3b9b0e6b622711be8", 0x61}, {&(0x7f0000005080)="2d288e6ee0a0bf90ea49f4b2b0066d93562a364d02cfd4656ea746c1ba3294d54bd18b36a65267fc7a2807b50d0fa85a72879779497ce17b4b3fec6d50c5be673edb780b928dd3acedc5c77ea75cf9170ebf019ebe7d32f869b05283fd90aa28d4263ffd6c78feb0362501a8c2f5fb744aedc6874ba03e1ef9ca3898720865c4e79dede5a507ea085a4fdc5490e6fc1a75184a53cb348bc4da3c9aca5742990ad3292a0e1538c788199638255fe746e699529cac6fdeb61a8fa9512d9215b3eb0273cca4a9dc7b47a609eedcb75b05ecff1350b97193058286e1f0efc9d0eaf52ebbb90b9e3ed8e47a35d0bfbda0af86b02c173945bfac77a448", 0xfa}], 0x7, &(0x7f0000001740)=ANY=[@ANYBLOB="200000000000000084000000020000000700010003000000ff0f000093bd4bc307df9d2db814b8693c22bd81052e10d56a5a7c623b72d74049e5ddd4c15b5b2b272805ca1bffe6b45b19e7f049d293a7c389b769b669edc45ef5f91b96ed19749074730cd710892689", @ANYRES32=r7, @ANYBLOB="20000000000000008400000002000000031104000200000009000000", @ANYRES32=r10], 0x8d, 0xaa0cc743f87fcb3d}, {&(0x7f0000005580)=@in6={0xa, 0x4e24, 0x8cd800, @local, 0x31800}, 0xf, &(0x7f0000005380)=[{&(0x7f0000005600)="9c4e2c41d27900ac1543cb6342a5e7ab3f7951ca8a537915e40e251c923d2c7c4a72897e9d7db6c7223bbb83de120fd34f2c35923924b1ed", 0xfffffffffffffd81}, {&(0x7f0000005340)="87e07073c49f5db06da69e3ee676b081c30921baecbefed2e00fc965baaebae92207a8e0bdeba324f0db8b04df912d", 0x2f}], 0x2, 0x0, 0x0, 0x10}], 0x7, 0x20000000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r19 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r19, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r19, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r19, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f0000003840)={0xa, 0x2, 0x0, @mcast2}, 0x1c) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) 17:02:03 executing program 1: 17:02:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240006001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 606.245186][T23162] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:03 executing program 1: 17:02:03 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240007001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:03 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x88a8ffff00000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:03 executing program 1: [ 606.532294][T23515] devpts: called with bogus options 17:02:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r9, 0x10001, 0x80, 0x7, 0x7f, 0x4, 0xff, 0x7, {0x0, @in6={{0xa, 0x4e20, 0x8, @remote, 0x200}}, 0x1ff, 0x7fffffff, 0x0, 0x7, 0x9}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r10, 0x5}, 0x8) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:03 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x7fffffff, 0x4) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000080)=0x9, 0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl(r3, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:03 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 606.648202][T23621] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240008001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:03 executing program 1: 17:02:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x4000) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x80000001) 17:02:03 executing program 1: [ 606.837683][T23727] devpts: called with bogus options 17:02:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240009001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:03 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x9effffff00000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4f, 0x40000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x75, 0x7f, [], &(0x7f0000000040)=0x81}) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="0efe98df557f7db70c5bdab2d75e6e68cc5c8382634a5463afe2fb132d8b0534135c04dc9a2b0ce8ee75830b8f9b4adf9d651cd008da19f8b1bb11a3cacf9741221dd17d81199cee54ce18b726444e16ab044bbeaf95624456f6b0928536945646d8c8aef55458bc2cd0bcb804605ac56d94ca49684fc75026b69846f24e485744ee108e324e1e061c56f795306a3c67dc74a69c71dbfea8920779c4008109a4789b26906b08f24d2140f9956c8006452931c3bd55bf7265b5a26de57e309e4a70d3c6104da4397d84e93c6c7ac38b5f746e", 0xd2) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 17:02:03 executing program 1: [ 607.043346][T24046] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:03 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000a001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) write$P9_RLINK(r2, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:04 executing program 1: 17:02:04 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @rose, @netrom, @netrom, @null, @default, @remote, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000280)=0xc) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000000)={[{0xf8f, 0x5, 0x4, 0x81, 0x4, 0x3, 0x7, 0x81, 0x40, 0x1f, 0x1, 0x8, 0x5}, {0x4, 0xa000, 0x3, 0x1, 0x80, 0x6, 0x5, 0x6, 0x0, 0x3, 0x4, 0x1, 0x5}, {0x4, 0x1, 0x8, 0x5, 0x9, 0x0, 0x0, 0x99, 0x0, 0x7, 0x3, 0x1f}], 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000b001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 607.333822][T24363] devpts: called with bogus options [ 607.345347][T24368] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:04 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x100) tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:04 executing program 1: 17:02:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000c001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00e000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 607.572373][T24623] devpts: called with bogus options 17:02:04 executing program 1: 17:02:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000e001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@ng={0x4, 0x5, "79aeca61c3fe07"}, 0x9, 0x3a6a9d1ba1fd0c71) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:04 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@rand_addr=0xe73, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:04 executing program 1: 17:02:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000f001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x7fffffff, 0x5, 0xff, 0xf, 0x98, 0xffff}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x6) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:04 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xe03f030000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 607.929377][T25013] devpts: called with bogus options 17:02:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc4c85513, &(0x7f00000000c0)=0xb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) fanotify_mark(r4, 0x28, 0x50000001, r5, &(0x7f0000000100)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:04 executing program 1: 17:02:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240010001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:04 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in=@local}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8, 0x1d, 0xb7}, @algo_auth={0xfffffd5a, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x7530}}) 17:02:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240011001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:05 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(0xffffffffffffffff, 0xffffffffffffffbd, &(0x7f0000000300)="8c135deef134a117d45e6fca4424725170a05d503b95dfb42fe59d6a5a91340346dee1f156922c19a1541fe9b219d0dedf930b0f8a244350915f7142ed7c5af9ee5bb615d630505c17af7cb05cbb363268e15dbb29be57078a240daba85acb5fab1d115030e58881c9671616a6ca8fa8913b2a67f08208171c43f08fdfa2b8d3c387795b2978d7a4369891fe5dbb755296ad6693e4badeb683ebb723c3647f17ae5d9867d1e8db97acd9649a94bbf9e7ce00040000538bafaff20cd129f7126993d185f694545cd728dfebbf646c37215e1f2d5e00f4ae17d9738183804a7986648750937df06265c1b0f3d98d50f320f8cc066ebdf214404762964ef882961afbc2310dad32516209a8170e6dd020870144538c9d611ba0f04cd631584b6d7f96b982e940eb598294e39cb2da35df12f49f16e3f432611beba85132509ee1244c44826ad6bb98de5f38745bb4e28b4a9c4e966868c3d7f2a06a70ff02cb7e1ccfe1b005fe4338f77165e89f946c78d2b0276d0bb058303e83bd23c9252a8d842a3d4160976c5e744393bccf54c403ee1f74f84c46c748bc84a5a7ef5526637db1bd258c23ba94d8ed12c6fd09e11cfa4cc386afebf4f03a550fe4308e1db1afc9ab6c4d456e88a4c1d475cc1ae3135f31ec5dbc153d22a6e4b6f214598a592530e4af1914f4927e119bb0dd6928fef8ad01e967e4ec1567768c8a88f5464c981e45fa80a11ca3b7") r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x420, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x81) fcntl$setstatus(r0, 0x4, 0x4000) 17:02:05 executing program 1: 17:02:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xeffdffff00000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 608.283612][T25450] devpts: called with bogus options 17:02:05 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:02:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240012001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:05 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x200000000000007f, 0x2) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0xf, 0x16, "662a4008480b2f18ad259e6dd30d582813d068e323d368a8b46991b39991851d6252017e262e9c92e90b85a30d70ed540ba1a2a1c0bbe64b60dd0f313bec1bc8", "122fa0656eee2027aadd38418b277c82e573ac3fd0e4526577084cace6c2c1fc", [0x7, 0x7fff]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0xfffe, 0x204, @mcast1, 0x20000004}, 0x1c) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xe1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x30000448) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x154, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c37}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x59, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @ipv4={[], [], @multicast1}, 0x639}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x912cd4c2d92ad1ef) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="46c88c7631f3e3a6c7e45657788d60ee7a8acebae10300fd45733226356d8177855296d4cebf7f86489eaa553ea7ba91832850c062659ff6f4c2438e0fbe1609739f76c8db744b585abf3cb26937f3873bb5eda3714721de61f74c37d5882030ff92d140a7e7c4de31b55aee5275d003b9f0f9f10abd5957eaeb4ce70f5671e0"], &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000340)=0x1e) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:05 executing program 1: [ 608.518823][T25686] devpts: called with bogus options 17:02:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) creat(&(0x7f0000000000)='./file0\x00', 0x8a) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xf0ffffff00000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:05 executing program 1: 17:02:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240013001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:05 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000500)="f2146c117c13b81149a9236a835b022a7f27c30b1381531ba619b791f7661c97a5f772b7f255008515b6257d9f24469c71318774808ce73c37042435a944e0961813f418584e928426e9a2323dd75b9caf9bbef88d7ecdbfa188567dfdec6b1042cf844fc1cb0bc55c01c763507fde0185cf9d7986d82e1b8f815a660848c2867fe858c34661beb633b6c287882114861a93e599f95e9f708ca3d33434a8bf81c9ddfbede118e200517e5aa2b5a6048cc574a095c0e429e86839e4fda467d5e206ed558de9556cb2877ec971cb2691e499dab8964c0b044a7098b290431694") r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x4, 0x6, 0x6, 0x0, 0x1, [{0x0, 0x0, 0xffffffffffff0001, 0x0, 0x0, 0x88}]}) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xff03000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) close(r2) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:05 executing program 1: 17:02:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240014001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 608.834118][T25962] devpts: called with bogus options 17:02:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_getattr(r1, &(0x7f0000000040)={0x30}, 0x30, 0x0) 17:02:05 executing program 1: [ 608.947178][T26057] validate_nla: 4 callbacks suppressed [ 608.947189][T26057] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:05 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r6, 0x1000}, 0x8) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24001e001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) getrusage(0x0, &(0x7f0000000240)) 17:02:05 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xffffff7f00000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 609.135371][T26223] devpts: called with bogus options 17:02:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40800) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0xc0, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x13}}, 0x1c) 17:02:06 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl(r0, 0xfffffffffffdffbd, &(0x7f00000000c0)) 17:02:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240048001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 609.262566][T26439] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:06 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) rt_tgsigqueueinfo(r1, r3, 0x9, &(0x7f0000000200)={0x16, 0x7, 0x7fffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r7, 0x1000000}, &(0x7f0000000100)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r4}}, 0x24}}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@rand_addr="67a23c5eb93da3fc5e409620f19a27c3", 0x4e24, 0x9, 0x4e22, 0x0, 0x2, 0x40, 0x80, 0x4, r4, r6}, {0x9, 0x1ff, 0x1, 0x8, 0x8, 0x7, 0x3ff, 0x4}, {0xd98, 0x100000000, 0x10001, 0x3}, 0x0, 0x6e6bb4, 0x2, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x2b}, 0x2, @in=@remote, 0x0, 0x0, 0x0, 0x3, 0x6, 0x5, 0x12f9}}, 0xe8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='\x00\x00\x00\x80\x04', 0xff) sendto$inet6(r7, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000000)) 17:02:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={r0, r1, 0xf, 0x1}, 0x10) 17:02:06 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0xfffffffffffff000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 609.515351][T26740] devpts: called with bogus options 17:02:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24004c001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x44a000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:06 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x7f, 0x2, &(0x7f0000000200)=[{&(0x7f0000000500)="eaa2607d6907919048958ba07067a8e64339ec70e964ae1a120412540bd84557593ae820729fd0fc4d7492a3d03987d10d1deb0b426b7eaa83e390688c338b829cbd4686e61374770a07564ece457cca68a7b37f5392beac15054a366c7af54cc256419533f4f79f21a58830d9c08d68ed337ef0b2807728d48a370f77ca40644e3a94c36b652d7b6d0e17b7418af5114f540ca542c8e9d86e40fd0557c55d1ccec456e9c612d4b97ef83e7e821639b737c0483887568e85025a7c47d1d20160893c09510284398dc3544ab94a76969ddbf5dc77649a7f67c8f34a7dd193da0ea613eed6b764689053", 0xe9, 0x7fffffff}, {&(0x7f0000000600)="46d401e1ba08a2edb91dd8a6659d06a162b2fb4eb7d8722934f3f43833c83af5146e7f98c0191c0438bdca3d8847a893737cfec585056a37875f5e56cd6145d7480ba0f59b46afedd193723014b337a29fad9c6b7bffca44023cacfa6110bb862f1784facf50b980e02ec14a329e84d304cceef4050da3f2c9f85fc1f631029f0596ba70ce52c41acb928394968948af45ddfa750652a13c84ac9d4fcd3864e59a2101be01205bb33faa3ac1a775b4fc5d9bdcb353c52e26af22e5f50f5d0bde465fbdedb567e0fe34c5800e91", 0xcd, 0x2}], 0x8002, &(0x7f0000000700)={[{@utf8no='utf8=0'}, {@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@uni_xlateno='uni_xlate=0'}, {@utf8no='utf8=0'}], [{@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, r0}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'devpts\x00'}}, {@subj_type={'subj_type', 0x3d, '@vboxnet0*'}}, {@permit_directio='permit_directio'}]}) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000ecbb99", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) [ 609.607734][T26805] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='\xb5;sQ\xe1a\x11\x91\xaf>E)\x00\x02jb\x96\"', 0x12) r3 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x5) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @mcast1, 0x0, 0x0, 0x0, 0x100}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$sock_void(r5, 0x1, 0xbf2b05278f5a848e, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="8b14cb", 0x3, 0x40, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) sendto$inet6(r4, &(0x7f0000000280)="c29d420310bf7db0b2c6c0d344c95f08eb5ad1df30afd9e4560bb432c1231da02031bdeef69d391342cdaae0bf2f6fa1356b67787ecd654cffd36148fa3bcb4d4dabf944a748e48cacbfa8a196f20b123e9b0a479750da466c0cbcb9e5b7521e5540e8cd948deb6d4b5bd6811c58d1e26f49b256a5c74293dd97831d56f25324cb4c23b6245960c8e3f8c69d81b29d7e2304e729d449a0584c306fe7d62dbd81c5601e857005feca981b", 0xfffffff8, 0x20004024, &(0x7f00000000c0)={0xa, 0x2, 0x0, @rand_addr="00004000003c000000004000000097ea"}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x303001, 0x0) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0xbcf) 17:02:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240060001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:06 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x1081000981900, 0x1}) [ 609.815657][T27183] devpts: called with bogus options 17:02:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240068001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x40) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x8, 0x4, 0x400, 0x1, 0x8082, 0x400}) socket$inet_udp(0x2, 0x2, 0x0) 17:02:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24006c001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:06 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r2 = gettid() tkill(r2, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000500)=0x8, 0x4) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0xc) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x90041, 0x0) getpeername$llc(r6, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500}) [ 610.053931][T27285] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:06 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x4200) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/236, 0xec}], 0x4, &(0x7f0000001380)=""/200, 0xc8}, 0x4}, {{&(0x7f0000001480)=@nl, 0x80, &(0x7f0000001940)=[{&(0x7f0000001500)=""/165, 0xa5}, {&(0x7f00000015c0)=""/238, 0xee}, {&(0x7f00000016c0)=""/82, 0x52}, {&(0x7f0000001740)=""/100, 0x64}, {&(0x7f00000017c0)=""/203, 0xcb}, {&(0x7f00000018c0)=""/119, 0x77}], 0x6, &(0x7f00000019c0)=""/134, 0x86}, 0x4}], 0x2, 0xea3056a77a987034, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@loopback, @in=@empty, 0x4e20, 0x7fff, 0x4e22, 0x0, 0x2, 0x40, 0x20, 0x32, r2, 0xffffffffffffffff}, {0xffffffffffffd498, 0x6, 0x81, 0x5, 0x2, 0x5, 0x9, 0x4bc}, {0xae, 0x8, 0x4, 0x3}, 0x3, 0x6e6bb1, 0x3, 0x1}, {{@in=@remote, 0x4d4, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x3505, 0x2, 0x0, 0x2, 0x34, 0x0, 0xfffffe00}}, 0xe8) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000001c80)={0x9, 0x3e, 0x8, 0x400}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000001c00), &(0x7f0000001c40)=0xc) sendto$inet6(r0, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:07 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) 17:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240074001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:07 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x2, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:07 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x3, 0x70, 0x1, 0x1f, 0x40, 0x2, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000080), 0x8}, 0x35206, 0x590, 0x1, 0x1, 0x100000001, 0x1, 0x9}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) ptrace$cont(0xa8fbb2c425ce48c, r4, 0x401, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000100)=0xe4, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) [ 610.317176][T27745] overlayfs: conflicting lowerdir path [ 610.341503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 610.347325][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:02:07 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) sendto$netrom(r4, &(0x7f0000000140)="1afc9a9cc594322a7d84ca612bd2d3c16778d89d1828ae2c972ac68eb456adb6cf233d4885c0b3c0ff8986f55a91169afde4aeaee6f868c9c0bbe2cd9a6b423edb86a07b8f6ea8abf19ad9aac5ede29e083c69a0b28071e3a970acec819ce69c620c8da6b556e075417e8e90a4fc3fbb63034d1ac6ebe7e68ac194f073bf7230276763e21a05dbccd8466ae652ecff3e599f4e86d0686a5479928b456416841169", 0x4b, 0x41, &(0x7f0000000040)={{0x3, @null, 0x3}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 610.386646][T27835] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24007a001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x10000015, 0x5, 0x0, 0x0, {0x1}, [@typed={0x14, 0x2, @ipv6=@loopback}]}, 0x28}}, 0x0) [ 610.470950][T27959] devpts: called with bogus options 17:02:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x7, "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"}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDENABIO(r6, 0x4b36) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000380)='ppp1\x00', &(0x7f00000003c0)='./file0\x00', r3) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) recvfrom$inet6(r4, &(0x7f00000001c0)=""/100, 0x64, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @empty, 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) write$char_usb(r0, &(0x7f00000000c0)="a93884719a4b6c30417591159e51dffc47a13f8d755947ff567b24ca4ff12777bd89852968094dc7f808e78c9fbaa932613739e867e7251bf09f7042bd7f36ddd1bb1ee0b1811e5ec24e8fa9636e83796b64038eac20d103b61a1ed7ec6efcf0959d49ca296fcdd57a19b573febe86bee820e29c4b906ca8d6574a4ef017f251210aca5b940a8627f821d1610cbd5ef5bb95ac2b5832197e88b2e0bdd054e9635d48281ecf27c12199386a24d95756b8bd8b5b7a70b40349089b95854ea46ee98ae1a4c8c72d21229bfd37ad8e", 0xcd) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000400)="55dca4f8cc7fed5e5093b55c82231ee2919231f0d28834b7a081635915c6ba7521191bd9f81d4dfda29414f2222345ab877ecb183fff8874244a0985b54f63265c5313922392d6325a5b990de77c180dec1f50734c652c9bf6ce200a58127ac789ca18a3a1a08edf7a4ddd6cd0188c3ccad89a5ed0b8e08d2bb1f37a108300a2c4e7adeb67b054c71684eb967446f8eb3352c05a70490a3de74be5bcb0b100"/169, 0xa9, 0x404a3, &(0x7f00000004c0)={0xa, 0x2, 0x0, @rand_addr="0000217de5b80096cc5100", 0xfffffffc}, 0x1c) 17:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400f0001800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:07 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getpeername$llc(r3, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0xffffffffffffff16) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:07 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x3, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:07 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000500)="f2146c117c13b81149a9236a835b022a7f27c30b1381531ba619b791f7661c97a5f772b7f255008515b6257d9f24469c71318774808ce73c37042435a944e0961813f418584e928426e9a2323dd75b9caf9bbef88d7ecdbfa188567dfdec6b1042cf844fc1cb0bc55c01c763507fde0185cf9d7986d82e1b8f815a660848c2867fe858c34661beb633b6c287882114861a93e599f95e9f708ca3d33434a8bf81c9ddfbede118e200517e5aa2b5a6048cc574a095c0e429e86839e4fda467d5e206ed558de9556cb2877ec971cb2691e499dab8964c0b044a7098b290431694") r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x4, 0x6, 0x6, 0x0, 0x1, [{0x0, 0x0, 0xffffffffffff0001, 0x0, 0x0, 0x88}]}) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000031800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 610.818459][T28298] devpts: called with bogus options [ 610.825048][T28303] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x8000, 0x8, 0x3, 0x1f, 0x8000}, 0x14) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000051800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x100000000, 0x80440) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000002c0)={0x2, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) ioctl$KDENABIO(r7, 0x4b36) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000001c0)=0x5, 0x4) r8 = syz_open_dev$dri(&(0x7f0000000080)='/\x00\x00v/dri/card#\x00', 0x20000000001, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r8, 0x5, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r8}) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000240)=0xffffffffffffffff) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r11 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r12, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VIDIOC_DV_TIMINGS_CAP(r12, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @raw_data=[0x7, 0x5, 0x0, 0x0, 0x100, 0x2, 0x7, 0x5, 0x10000, 0xfffffffd, 0x3, 0x20000000, 0xdf8, 0x7fff, 0x7, 0x2, 0x4, 0x444, 0xffffffff, 0x6, 0x80, 0x9, 0x7, 0x5, 0x9, 0x8, 0x3fd, 0x9, 0x8001, 0x4, 0x91]}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0600c3285d002f0cfa040db50900"], &(0x7f0000000180)=0xe) ioctl$DRM_IOCTL_GEM_CLOSE(r8, 0x40086409, &(0x7f0000000040)={r9}) 17:02:07 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001000130f0000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:02:07 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000061800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:07 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000500)="f2146c117c13b81149a9236a835b022a7f27c30b1381531ba619b791f7661c97a5f772b7f255008515b6257d9f24469c71318774808ce73c37042435a944e0961813f418584e928426e9a2323dd75b9caf9bbef88d7ecdbfa188567dfdec6b1042cf844fc1cb0bc55c01c763507fde0185cf9d7986d82e1b8f815a660848c2867fe858c34661beb633b6c287882114861a93e599f95e9f708ca3d33434a8bf81c9ddfbede118e200517e5aa2b5a6048cc574a095c0e429e86839e4fda467d5e206ed558de9556cb2877ec971cb2691e499dab8964c0b044a7098b290431694") r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x4, 0x6, 0x6, 0x0, 0x1, [{0x0, 0x0, 0xffffffffffff0001, 0x0, 0x0, 0x88}]}) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x10000000, 0x101000) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f00002de000/0xe000)=nil, 0xe000}) r4 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x10, 0x10000) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000040)={0x3, 0x10000, 0x1}) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f0000000000)=0x9) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000000)) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000140)={@local, @empty, @multicast2}, 0xc) [ 611.140378][T28743] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 611.217830][T28768] devpts: called with bogus options 17:02:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000071800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:08 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) timer_create(0xe, &(0x7f0000000240)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000002c0)=0x0) timer_gettime(r3, &(0x7f0000000340)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDENABIO(r6, 0x4b36) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="0100000020000000003c4f9f84ac4db1000a00000004092d82b71f220400"], 0x18}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x124, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc5fb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1d}]}, @TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="4e151424c4e1f60335fa07b7d36e12f8", 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'lapb0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x14101) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:02:08 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x5, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 611.351952][T28913] devpts: called with bogus options 17:02:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400200) write$FUSE_GETXATTR(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x8000}}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000091800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 611.460698][T28921] devpts: called with bogus options [ 611.485741][T28927] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240038091800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x250101) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) sendto$netrom(r4, &(0x7f0000000140)="1afc9a9cc594322a7d84ca612bd2d3c16778d89d1828ae2c972ac68eb456adb6cf233d4885c0b3c0ff8986f55a91169afde4aeaee6f868c9c0bbe2cd9a6b423edb86a07b8f6ea8abf19ad9aac5ede29e083c69a0b28071e3a970acec819ce69c620c8da6b556e075417e8e90a4fc3fbb63034d1ac6ebe7e68ac194f073bf7230276763e21a05dbccd8466ae652ecff3e599f4e86d0686a5479928b456416841169", 0x4b, 0x41, &(0x7f0000000040)={{0x3, @null, 0x3}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 17:02:08 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpriority(0x2, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r6, 0x2}, 0x8) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x800, &(0x7f0000b63fe4)={0xa, 0x1000, 0x36, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4001000010001307000000000000000000007c95e79723a7c647000040000000000000000000000000003a0798f929000000e600010044000000000000000000000000000026a2346108b95b7361696e841ba600000012d8c7f2063376d1d42c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:02:08 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0xfffffbfc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000a1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 611.773793][T29140] devpts: called with bogus options [ 611.780870][T29165] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:08 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000240)={&(0x7f0000000200)}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0xde701ffce3be18f, 0x0) fspick(r3, &(0x7f00000002c0)='./file0\x00', 0x1) wait4(0xffffffffffffffff, &(0x7f0000000100), 0x2, &(0x7f0000000500)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000080)) 17:02:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='#\x00\x00\x00\x1do\x00\x00\x00\x00\x00NJ\xe2\x10', 0x6, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) syz_init_net_socket$ax25(0x3, 0x6, 0x7) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000440)={0x3, [0x400, 0x0, 0x38]}, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000400)={0x3, @bcast, r5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendfile(r1, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet_mreqsrc(r6, 0x0, 0x34, &(0x7f0000000040)={@multicast1, @broadcast, @dev}, &(0x7f0000000080)=0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'irlan0\x00', {0x2, 0x4e22, @multicast1}}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KDENABIO(r8, 0x4b36) ioctl$VT_SETMODE(r8, 0x5602, &(0x7f0000000200)={0xb7, 0x4, 0x3f, 0x2, 0xff}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x1) 17:02:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000b1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:08 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) sendto$netrom(r4, &(0x7f0000000140)="1afc9a9cc594322a7d84ca612bd2d3c16778d89d1828ae2c972ac68eb456adb6cf233d4885c0b3c0ff8986f55a91169afde4aeaee6f868c9c0bbe2cd9a6b423edb86a07b8f6ea8abf19ad9aac5ede29e083c69a0b28071e3a970acec819ce69c620c8da6b556e075417e8e90a4fc3fbb63034d1ac6ebe7e68ac194f073bf7230276763e21a05dbccd8466ae652ecff3e599f4e86d0686a5479928b456416841169", 0x4b, 0x41, &(0x7f0000000040)={{0x3, @null, 0x3}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) [ 612.003127][T29426] devpts: called with bogus options 17:02:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@bcast, @remote, @rose, @bcast, @remote, @remote, @null, @bcast]}, &(0x7f0000000000)=0x48, 0x40800) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x350b4c63b0d5aefe, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000200)={0x5, &(0x7f0000000280)=[{}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {}, {}]}) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) write$FUSE_STATFS(r4, &(0x7f0000000140)={0x60, 0xfffffffffffffffe, 0x5, {{0x0, 0xfff, 0x7, 0x0, 0x9, 0x200, 0x1, 0x6}}}, 0x60) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:08 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r6, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r3, r4, r6}, 0xc) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000005c0)={0x338, 0x0, [], {0x0, @reserved}}) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r8, 0x80605414, &(0x7f0000000340)=""/27) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000000500)={0x5, 0x9, "eef1c23a076a6adb7e3f8b0c40ad9af254c26f14eeda310b0909fb7ae16198219a70eab05417ee20e19c97ee3eefede8d24694cd9336fd9f32b332f827a3f22d816fa077f2ec48739f9a0ca402062b8c02009c11c39fcc6d0064b284bd708c4a0d911ec0f8026bd10146a7049adc6ce8ffe388030a3aa10933265aa2c2e529daa9584e7ebb452f74319b80cd4cf2e511bdef357ce98c44978afd4454b44a7ee5f4ec7691d12c06a6ee"}, 0xb1, 0xa610632a5aa27011, &(0x7f0000000080)={0x22, 0xd3, 0x4, 0x4, 0xff}, 0x6) 17:02:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000c1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 612.226992][T29549] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 612.238142][T29605] devpts: called with bogus options 17:02:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x2000)=nil, 0x2000}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x6c, 0x4) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:09 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:09 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) sendto$netrom(r4, &(0x7f0000000140)="1afc9a9cc594322a7d84ca612bd2d3c16778d89d1828ae2c972ac68eb456adb6cf233d4885c0b3c0ff8986f55a91169afde4aeaee6f868c9c0bbe2cd9a6b423edb86a07b8f6ea8abf19ad9aac5ede29e083c69a0b28071e3a970acec819ce69c620c8da6b556e075417e8e90a4fc3fbb63034d1ac6ebe7e68ac194f073bf7230276763e21a05dbccd8466ae652ecff3e599f4e86d0686a5479928b456416841169", 0x4b, 0x41, &(0x7f0000000040)={{0x3, @null, 0x3}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 17:02:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000e1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:09 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xa, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r3, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 612.485833][T29880] devpts: called with bogus options 17:02:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0xa, 0x800, 0xfd, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:09 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000f1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:09 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) 17:02:09 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 612.759405][T30098] devpts: called with bogus options 17:02:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000111800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x6, 0x101}, 0x20}, 0x10) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000080)) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100005070000000000000000000000008a252f6007f9fad8d997af327095f9ae8e98ed59c5cd7795f45c02a230b939fca318b110ea6bb31c6f9602f56188e1ca488b5dd0986c04cb1dedfbb224e385916202400f5acef9286870ce2e054e7c9d3091efeb1c1403b5217f3f740bd768108eb5ecb12bc400551219523482ac2dfbde5e954740d3099d12658ada4eadf2b3d0a0b9f79a369f8d280f2028f8dec75dac2b69d445b99b02dba449bc68e04c8bab1cbbeb1b7f8f09d040ceb401f4306315dfd5", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000480)={0x8000, 0x4, 0x7a7bd431, 0x40, 0x7, 0x1, 0x4}) r10 = socket(0x10, 0x803, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x400, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r7}}, 0x24}}, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000140)=r7) 17:02:09 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_fl\xb4u\xbe\xca\xfb?yowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x9, 0x20, 0x2, 0x81, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0xf15936ca3261e6f7, @perf_config_ext={0xa318, 0xcf1}, 0x1000, 0x81, 0x1, 0x5, 0x0, 0xb1b, 0x2}, 0xffffffffffffffff, 0xc, r4, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@mpls_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x7fffffff, 0x4) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) r6 = semget$private(0x0, 0x3, 0xd9a9d7bb0a706e9a) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) semtimedop(r6, &(0x7f0000000100)=[{0x3, 0x100, 0x2000}, {0x1, 0x20, 0x1800}, {0x4, 0x100, 0x1000}, {0x3, 0xffff, 0x1000}, {0x3, 0x80, 0x1000}], 0x5, &(0x7f0000000240)={r7, r8+30000000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0xa) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000143a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000008001d0000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1701d000000000000"], 0x140}}, 0x0) 17:02:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000000)="75c95eca018c6e4225a1d336901c9c5e356bdb382817d021c75172d099f1d3b079237ed00b545e007b049b9200"/59, 0x3b, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0xffffffffffffff64) 17:02:09 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) 17:02:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000121800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 613.007869][T30345] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 613.028210][T30345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 613.048207][T30317] devpts: called with bogus options 17:02:09 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xe, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:09 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r4) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c1b6590c855789dffed1600000000000000000000000000000000000000000000000000000000eaff0000000000000400000000000000000002000000000000000000000008001d0000000000480001006d643500"/235], 0x140}}, 0x0) 17:02:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000131800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:10 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) 17:02:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$dupfd(r0, 0x406, r1) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000141800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 613.360915][T30637] devpts: called with bogus options 17:02:10 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xf, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:10 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = gettid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0xffffffffffffffcc, 0x1, {{'md5\x00'}}}]}, 0x18}}, 0x0) 17:02:10 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fff, 0x1) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)={0x1, 0x8, [@empty, @dev={[], 0x29}, @random="a23e8d198741", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={[], 0xa}, @broadcast, @empty, @remote]}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x400}, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r8, 0x18a5}, 0x8) 17:02:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400001e1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000000)={0x0, 0x3}) 17:02:10 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') [ 613.649124][T30967] devpts: called with bogus options 17:02:10 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000201800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:10 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001000130700000000000000000000000000000000000000000000000000000000000000000000000000000001000000008be5877f86a07f8ac1365012", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:02:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240009381800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) modify_ldt$write(0x1, &(0x7f0000000200)={0xfffffffa, 0x20001000, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x295cdfdd1a3ff41, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @bcast, @bpq0='bpq0\x00', 0x3, [@null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x23daa1ba4d1a0ef1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) vmsplice(r3, &(0x7f0000000340)=[{&(0x7f0000000280)="9fc78f721e529a3b4610b08cbd0e52413dd08d2d6a15d4b82f0d6bddc10b", 0x1e}, {&(0x7f00000002c0)="9ab88683afb51e3a122d9bd341019712e5728c0dc8a830a1194d4e3553d163274a84e1af7943a5df6383c25d98d5d772e47040b06efa6e347becf0d4aa86ce2fc5d4724a8d0b3f9af6c2c8c950d1833bbd792a5114c4a6d8cb96c5c0b12d051e5ea901115ff1cd6492aebc", 0x6b}], 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x9) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x101, 0x40c000) socket$caif_stream(0x25, 0x1, 0x2) accept4$tipc(r1, &(0x7f0000000080)=@name, &(0x7f0000000140)=0x10, 0x1000) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:10 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) 17:02:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @mcast1, 0x2, 0x0, 0x0, 0x100, 0x0, 0x200100}) recvfrom$inet6(r2, &(0x7f0000000180)=""/211, 0xd3, 0x2020, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f00000000c0)="9067696d4051f4e5ede3bece746b8120aa86c67f301b27f830fac1c6b845d454450dc0df8fa55b2435d30ee32c1b56380c004df5a066d5f909747172139f867b41dba8494b6cc8d2435dd3b155443b02cd813f68b82aa00617880c627c7f9a90d56b69f3534893fab79950778927a25cd52b553acd8ef214e838195cc39029e5a4254edb2bd26cf792566f2a42f8510e9d1e3a2a2d4de16ee05c5d91661331badc10fa58b5cc90b1e804c3", 0xab, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1ff, @mcast1}, 0x1c) r3 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x0, 0x220801) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000300)={0x90002000}) r5 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000280)=0x14) 17:02:10 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xbc}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000401800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 614.093906][T31487] devpts: called with bogus options 17:02:10 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x48, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000009f82dbd615e5fd12b2886b963577a1b5d5291a02d4f9c90c4aaf20da3dc457580aa69a422a6c41c133dfc5d5c5737b1362a82809a2dc9da1fd39a0cc62566c13e34a29a08e2208ec6762b38aa54a81c29ca7e2dcff931beec06ef6971c82fdcd29e3273b191ba0184e2efc93e92a99fbad324be6ab10735f7583c0799399c1d71a71acf0851d86a6da0b164a6a43e438c7f3ced3b42ffd9fed1cc812091683a6"], 0xa9, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, "0529"}, 0x22) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffe14) sendmsg$sock(r3, &(0x7f0000000240)={&(0x7f0000000000)=@ipx={0x4, 0x401, 0x1, "6d3a7baf33f9", 0x15}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="2da3cd05", 0x4}, {&(0x7f0000000500)="e3af22372999970bfb7ec2991619e1299a8a8557beb5db58ca36dd0a39675976e0c7cf57e86f31bc97320bcd80962cf5a0cf46bc343798d3d50dcaf36427b0cdc16a1552c18fb112d7083d40ff7af5fc50049d517ee1152e64e2e33f11ebbea8cbf75bbbe077f03af938c0406f0506b8d67d7b21191e8eb190dd65250c6fe29613104ffc0a6f1a98db9baf75873d65d7b2978c221ddb1bf38d2bc261e8045048057cc1c797bc7765e6cc9b31a43dbf6fd25ef6cf52c13ee3cf0a6823935736be7a5499979e2ee550427911ea8f8afd3e27918ceffedf01681d327df9384f6561a6fb", 0xe2}, {&(0x7f0000000600)="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", 0xfc}, {&(0x7f0000000180)="43b245ff8dccd812641faf0e4411851bb96e25f70a82448e818acc168c8b60ca2849ba3b193ac3a462fb7eb26d32f531be60c5f07dc087fab01c878ffd", 0x3d}], 0x4, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0xa71}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x60}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:11 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) [ 614.212232][T31544] validate_nla: 5 callbacks suppressed [ 614.212241][T31544] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 614.247353][T31561] devpts: called with bogus options 17:02:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) r3 = accept4$netrom(r2, &(0x7f00000000c0)={{0x3, @null}, [@netrom, @rose, @remote, @netrom, @netrom, @netrom, @rose, @bcast]}, &(0x7f00000001c0)=0x48, 0x0) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000280)={0x3, 0x4, 'client1\x00', 0x4, "46d7c4bc2e650088", "12dbbd07f06b2401260e6d4884250401fc8d7f6c0a5e2fe807a7c4251d3b63e4", 0x10000, 0x6}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x111800) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r6, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000481800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:11 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b0732529ca58fe9a2315c8281b530002000000000000000000000008001d0000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000000000000"], 0x140}}, 0x0) 17:02:11 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4c, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400004c1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 614.488840][T31727] devpts: called with bogus options 17:02:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:11 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) socket$inet6(0xa, 0x3, 0x6) 17:02:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x81, &(0x7f0000000040)=0x4) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:11 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) [ 614.575253][T31818] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:11 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x60, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240065581800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 614.788593][T31945] devpts: called with bogus options 17:02:11 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) 17:02:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x77d, @remote, 0x7}, 0x1c) [ 614.862866][T32137] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:11 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) perf_event_open(&(0x7f00000003c0)={0x4, 0x70, 0xff, 0x3, 0xa0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000200), 0xe}, 0x90, 0x710, 0x3, 0x6, 0x0, 0x3, 0xec4}, r2, 0x0, r0, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x189200, 0x0) connect$caif(r3, &(0x7f0000000100)=@dgm={0x25, 0x7, 0x3}, 0x18) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000020008801d0000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca9a02d8ab1edcec805c7382f0a7584d"], 0x140}}, 0x0) 17:02:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) keyctl$unlink(0x9, r1, r2) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@ng={0x4, 0xf, "9f7444aae4b603bf24340d"}, 0xd, 0x4) keyctl$link(0x8, r1, r4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) r6 = syz_open_procfs(r5, &(0x7f0000000380)='net/ip_mr_vif\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x1, 0x1, "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", 0xda, 0x0, 0x3, 0x5, 0x2, 0x0, 0x20, 0x1}, r7}}, 0x120) 17:02:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000601800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:11 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) [ 615.070439][T32206] devpts: called with bogus options 17:02:11 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x68, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:12 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000540)={0x200, 0x7, 0x4, 0x0, {}, {0x1, 0x0, 0x6, 0x35, 0x80, 0x3f, "1fea1350"}, 0x0, 0x3, @planes=&(0x7f0000000500)={0x8, 0x1000, @mem_offset=0x3f, 0x9}, 0x4}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001000000000000000000000000000000000000000500"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000006800"/249], 0x140}}, 0x0) 17:02:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x381002) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00002d2000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f8805000000c4e1765ff6440f20c0350a000000440f22c026f30f0966b8f6000f00d866b84e008ed03e66f36fb8fa0000000f23d80f21f835c00000d00f23f80f01ca360f01cf", 0x47}], 0x1, 0x8, &(0x7f0000000140)=[@cr0={0x0, 0x20000000}, @flags={0x3, 0x2}], 0x2) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$BLKALIGNOFF(r6, 0x127a, &(0x7f0000000180)) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240058651800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000280)={@loopback, @empty, @loopback}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @rand_addr, 0xc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x6, 0x0, 0xff, 0x8, 0x5, 0x93e0}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDENABIO(r6, 0x4b36) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f00000006c0)={"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"}) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r8, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x8) r10 = socket(0x1, 0x6, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e1f, 0x5, @mcast1, 0xcb82}}, 0x9, 0x1fd, 0x5, 0x8, 0x54}, 0x98) [ 615.309293][T32432] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 615.332271][T32420] devpts: called with bogus options 17:02:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000681800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:12 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) 17:02:12 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) ptrace$getregs(0xc, r2, 0xb06b3cbc00, &(0x7f0000000200)=""/113) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x180000, r4}) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:12 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x6c, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 615.593174][T32701] devpts: called with bogus options 17:02:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400006c1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:12 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TCSETSW(r1, 0x5403, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)={0x1ff, 0x8, 0x4, 0x400, {r6, r7/1000+10000}, {0x5, 0x207d530a3f0eeb4c, 0x9, 0x5, 0x1, 0x8, "1595a19e"}, 0x6b692fd1, 0x2, @fd=r5, 0x4}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r8, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KDENABIO(r10, 0x4b36) ioctl$VIDIOC_ENUMAUDIO(r10, 0xc0345641, &(0x7f0000000000)={0x6, "01cc9acf12de5986cf3320af5b960d9c2c470b792390b1bf8deeef4656b28be4", 0x1, 0x1}) [ 615.664415][ T337] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, &(0x7f0000000200)=""/151) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000741800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:12 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000500)=""/175) open_by_handle_at(r2, &(0x7f00000002c0)={0x88, 0x14, "892cfa9dc9c94e80145a98729f7f7b4e5448fe8b70b64b4cb08543ebac3c8a107bf24c3852ea33150c83cfdd5e567bff50073a2de1a00309b98a204e307d16af3fa9c05282112f75f39d7f29c698f934321faea9d4038c1085a4619bedfbcc2588fbff4107df75d5a00a067158ed6ca5fa6dcc3c0bf72930b7058af14ecfcfa6"}, 0x801c1) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x5e}, {}, 0xfffffffe, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) 17:02:12 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x74, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:12 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400007a1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:12 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x2, r5, 0x1}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:12 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDENABIO(r1, 0x4b36) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1ec, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1965}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0xd9}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x20}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @empty, 0x8}}}}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) ioctl(r2, 0xffffffffffffffc1, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x2000002, &(0x7f0000000940)=ANY=[@ANYBLOB="66643da495220f008c42d89ffab32e92f8834c5f4a47a8f181484995ea1d695973c09c58d905cad510cb11d9642727cae4a181051e37b61bfdbc879c7813514634ff57995de2", @ANYRESHEX=r1, @ANYBLOB="2c726f6f742d6f64653d30303030303030c29a30303030303030303232343030302c757365725f69643d5fb38e23f85f8ecb3990148c5b4fb1f5f3e9724c5ca6473e5e5485d08ac157cc749149cffff7963440be8106c5b5bdaa4e5775181ba1c9f21555535d81405e273d42341fd83f0eabf706e30992c7f18b2e180ef15d129218b6510224563090e238e15ef7bda68d762072dd1aebb3bc4c5458c58254d7fa4b273e842b047e23cc47566375671ae5aff7ec2b961eba7704d62c67551e62e4306ef3890492fc62ba315226badd2dfed61a86eff9ca90842e8823a522acc73a843c6c8af5573180779fe2579c570c", @ANYRESDEC=r8, @ANYBLOB="2c67726f75705f69643d5ff805310f1beb3eab55ee3284b62385d3f52fd353138d8766e315225884899c92279dad3509919aa0f17854e4efddac6f2a32c78f080fea1be6497b528d2805a0ccd0e5bbe6a6bfc4889bab6eb777f6cd1f507fcf02acad97ef4d639f6f3d79e36b08d5d681a2b50e006dfd4bbf4a268a05d4bd7dc23c8702f3f21e2c32a02ca2926df2487ec1ab9646e9f7bf161129149eb730aa86b00cc9", @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000000800,allow_other,allow_other,\x00']) [ 616.062178][ T664] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:12 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") [ 616.169121][ T764] devpts: called with bogus options 17:02:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000811800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:13 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 17:02:13 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x7a, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r5, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r6, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r7, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r8, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r9, 0x0, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r10, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r11, 0x0, 0x0) getgroups(0x4, &(0x7f0000000140)=[r7, r9, 0xee00, r11]) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x8, {{0x4, 0x3, 0x3, 0x49b, 0x4a54, 0x40, {0x5, 0x3, 0x80000000, 0x5, 0x6, 0x200, 0x1, 0x0, 0xfffff8b5, 0xfffffffc, 0x401, r5, r12, 0x7, 0x7f}}, {0x0, 0xa}}}, 0xa0) r13 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r2, &(0x7f0000000100)=0x206, 0x4000000000dc) ioctl$KDGKBTYPE(r13, 0x4b33, &(0x7f00000000c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) 17:02:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000f01800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 616.442183][ T860] devpts: called with bogus options [ 616.451744][ T863] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x4e22}, 0xfffffffffffffdd1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:13 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db6e000000f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0xe8ba04fbc8de9753) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x280) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@output_mark={0x8}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x140}}, 0x0) 17:02:13 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r0 = socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) write$P9_RLERRORu(r2, &(0x7f0000000000)={0xd, 0x7, 0x1, {{}, 0x3}}, 0xd) r3 = socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/dri/card#\x00'}, {}], 0xa, "4b9c9cf83afd75d7be794848e428306b8b63dea24e1faaf72925db48e11e65e915ee57090124297ef347bec903aa75ca0e07b644cf078e285edef8c08786e3c648e05ccc60480eb5a979c27e1963f44566305640d0e0043b5519af08956ea3cb2759869ed705bcb01e80c3309baab12b88857152e9518c7fa49401776edc805b9abe54942fea3692c9ca33b9951a980fee894725a403a474c617ffe9449b327bb58c7e63fd494571a31dd94c643b81bf2d9f1a7e890ef409858dfeb42b923d2c7e64d3cefa5069deaf3979d046bc93a317ec55f0cede51"}, 0xf3) 17:02:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240003ff1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:13 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000f00210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x10001) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r2, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 616.775535][ T1090] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 616.798975][ T1084] devpts: called with bogus options 17:02:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000021800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) gettid() r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:13 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)="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", 0xffffffffffffff9c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ftruncate(r2, 0x10001) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-control\x00', 0x80000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r8, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x100, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x5}, 0x0, 0x0, &(0x7f00000002c0)={0x3f, 0x7, 0x2}, &(0x7f0000000340)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x7}}, 0x10) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0) 17:02:13 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xf0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 617.082423][ T1317] devpts: called with bogus options 17:02:13 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes256, 0x3, [], "3e5cff7c85fa88a66e6bd3a0f210b7f1"}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x1, 0x3, 0x800, 0x20, 0x200}) [ 617.106256][ T1334] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000031800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:14 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:14 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0xa, {0x9, 0x4, 0x4, 0x56d}}) r3 = gettid() tkill(r3, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = getpid() socket(0xa, 0x2, 0x4e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x40) sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x8200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4001000010001307000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f306011f5360522f6c5171c000e2d500000000000000000002000000000000000000000008001d0000000000480001006d643500"/263], 0x140}}, 0x0) 17:02:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1260000}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe34b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x404d8cc}, 0x40) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r5, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f00000000c0)={0x8, {{0xa, 0x4e20, 0x5, @local, 0xf5860000}}}, 0x88) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) 17:02:14 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x253, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000041800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 617.367078][ T1435] devpts: called with bogus options [ 617.376799][ T1469] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:14 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0) 17:02:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) write$binfmt_misc(r1, &(0x7f00000000c0)={'syz0', "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"}, 0x1004) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:14 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000040)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x0, 0x5, r3, 0x0, r6, 0x0, 0x40, 0x10001}) ioctl$KDENABIO(r2, 0x4b36) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00002df000/0x2000)=nil, 0x2000}, 0x2}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x6, 0x1000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xff76) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r7, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x0, &(0x7f0000000280)=0x3f2, 0x4) 17:02:14 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x300, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000051800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) [ 617.680112][ T1661] devpts: called with bogus options 17:02:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000061800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:14 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000130700000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000001998fc773ca370a4758a2d841f0a8522f6ed33bbfcb098ad9c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000008001d0000000000480001006d643500"/248], 0x140}}, 0x0) 17:02:14 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") [ 617.781508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 617.787367][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:02:14 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x500, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 617.897879][ T1901] devpts: called with bogus options 17:02:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000071800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:14 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380)=[{{0x77359400}}], 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="40010000100001000000000000000000000000000000000000000000000000000000000000be67a44fdc9cb4ee000001ed00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002926d5345f11cb23fffb66b7000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000003f00000000000000000000000000000000000000000000000000000000020000000008001d000000000048000100a3cd0f49e5b0255ac7adf5e1db1edf6d64350000000000000000000000000000000000000000009f8b732f00"/256], 0x140}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 17:02:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0xffb, 0x2, 0x0, 0x1, 0xfffffffd}, 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr="000000000001005eb06a27a08f8900"}, 0x16a) 17:02:14 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000, r7}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000380)={r8, 0x0, r9}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x481600, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r11, 0xc004743e, &(0x7f00000018c0)=""/246) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000127bd7000fedbdf250d00080008000400018000000c00020008000700070000001c000200080007000900000008000d000100000008000400ffffffff1400030008000800060000000800030004000000"], 0x58}, 0x1, 0x0, 0x0, 0x6000050}, 0x4c041) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002e1000/0x1000)=nil) preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r13, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r13, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0xcc}], 0x1, 0x8000001) tee(r13, r11, 0xfffffffffffffffe, 0x2) 17:02:14 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000081800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:14 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x600, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 618.164421][ T2104] devpts: called with bogus options 17:02:15 executing program 3: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x3d9) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDENABIO(r3, 0x4b36) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000200)=""/114) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="31b9d6d44262cc4c148cbde1db86409825f9c74b3b", 0x15, 0x0, &(0x7f0000b63fe4)={0xa, 0x1000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0xbe, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="40010000100013e15000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0) 17:02:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x8e84f39ab4b71305, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:15 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000091800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 618.393452][ T2319] devpts: called with bogus options 17:02:15 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x700, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) 17:02:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001900010000000000000000001c0000000000000000000000f5626aa95a5a6696cc7ded"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0xb, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0xfffffffe) 17:02:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000a1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000040)={0x2, 0x3, @start={0x81, 0x1}}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) sendto$inet6(r2, &(0x7f0000000140)="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", 0x1000, 0x20000, &(0x7f0000001140)={0xa, 0x4e22, 0xfd, @ipv4={[], [], @empty}, 0x4}, 0x1c) 17:02:15 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:15 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xa00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000, r7}) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x201, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000380)={r8, 0x0, r9}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x481600, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r11, 0xc004743e, &(0x7f00000018c0)=""/246) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000127bd7000fedbdf250d00080008000400018000000c00020008000700070000001c000200080007000900000008000d000100000008000400ffffffff1400030008000800060000000800030004000000"], 0x58}, 0x1, 0x0, 0x0, 0x6000050}, 0x4c041) prctl$PR_SET_MM(0x23, 0x6, &(0x7f00002e1000/0x1000)=nil) preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r13, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r13, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0xcc}], 0x1, 0x8000001) tee(r13, r11, 0xfffffffffffffffe, 0x2) 17:02:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000b1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:15 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x140000) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x229c157a8b243849, @reserved}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:15 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000c1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:15 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="200000006a00fdff000000000000000000000080000000e10700050072959957477683d40468f1da75a64aad75c2caa5eb6a2f2f0ab6750000000096ef660ec6500b68476255528743ab1f54f2c75534eb381e0d27400caf4bcd9df516465ace0204fcda6bba69a63c6b88e6f91a78066ae9a8ac9a00dd08d9542c3352472b003b504be04d9b2acc4948420b662737e63d838415658fdeadb9d5f2f0f48d831b8c664ce9eb0000796f8b2471aae294c5d4bf9d32291d2d2b272f3bf9faa97c701cad5fe200e933cc5d01491176fe0400097607adff4df10af315b817c717b123a4fce32164e939df76352fa6b5107127ed5a4114e9fc5543ec320000000000000002faa7bf8a44c3169f183a6a38c1f46d67092f23d6d9ec9e5e0923d6b90a347ed276a5f1a6a9b9334d26b82ae6e82d8348bbfb6d9e6a5d500914e20d96ff172fe1e0d12eb4e03d6d7872f6ca84b45ab1304fb2dc2b79f52e3fb11100000000539a3ec739b009ac80977a587d6af15cd492e8e2b891de276f733c489e42a62b13eaa77975d8141d000000000000", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xc00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDENABIO(r2, 0x4b36) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDENABIO(r4, 0x4b36) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000280)={0x3, 0x501ae135, [{0x4, 0x0, 0x7}, {0x8, 0x0, 0x401}, {0x46, 0x0, 0x1}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @mcast1, 0xc4e}, {0xa, 0x4e24, 0x1ee8, @remote, 0x3}, r7, 0x9}}, 0x48) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0xffd, 0x9, 0x1) 17:02:15 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000e1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = dup3(r0, r0, 0x80000) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r2, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17:02:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) 17:02:16 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xe00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x480800) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000f1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 619.427287][ T3123] validate_nla: 6 callbacks suppressed [ 619.427297][ T3123] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:16 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:16 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xec0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000101800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) 17:02:16 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) 17:02:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x80) pipe(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000111800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:16 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:16 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xf00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:16 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000700)='./file0\x00', 0x690200, 0x41cc280c3800ddf5) ioctl$KDENABIO(r2, 0x4b36) ioctl$KDDISABIO(r2, 0x4b37) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x11, &(0x7f0000000440)=[{&(0x7f00000000c0)="d8eed93929ba0287c9e53d6352a107dcb0587a0582b5b17ae8661c4425649c4ed1554292c8f296cbef0ed163fa292d672910673df789dbce2dfbd4a2f2698091ab470d70058c2f2a1f199d434994726c1509ed0db2b2f390bc746f", 0x5b}, {&(0x7f0000000140)="348aeb4bf99bd1e1b398ceffc1c53e508e8e1207a6535d305fd75f494545d7f352eff4ee45d95a018fe6ebfd5d0031e2f3650d950e34be8bc0fd212531948689672e2d836ecfa871ce43665b72fcda99d9f1672bf66c1f7007c47f749f3d784839b3d947638fee43c5206156cdcf8935ac81eeeb7f887169d2f382bbc2d5fa700618bab6ce607b43d8f6b2cee152db01a54545ddd67c50aa06c70ac9037e943eaabd63ef17100b0e140612bdea76dc794021e0e16f99", 0xb6}, {&(0x7f0000000200)="51f749743f168896c9fd95dfe9629a3e87ef7470760218b43f3bcc0864db6d2e85a3303699ba82a5fd43cc0b3547a75673f67d5309b0e184407523f237b0413b2ddbe1a820e20badcc185a939deefb9caf1034dad0a82366f7360f3da51bbeb626480b2ffe2d30d4316f11031fbca5d90d", 0xffffffffffffff01}, {&(0x7f0000000280)="3a93e293a4c73460c7c4f50712da8adecd9cac5b304f3f9fa8974b6ba193d15282a7ceceabbe112d520840f2b66bda", 0x2f}, {&(0x7f00000002c0)="f9f4f9003ff949c19ed9a3ad742e1d02aa30275ac25bfefb440e5f8feca8ccb120f0e4fc43aa34fafc00c5ef65405bde4b8350f813f79db327d3a65a0ad172ce2450ab013ecbf6a4ca1f6d4ff955a9fee46ac7ce3e85292fabed4d493b72e5f44168e4b78e46ef6c7c2d501866d1c5a8a27d6e3ab277226fab217cbfbc70c7e7217eeb54668bc82e949f43360381a978bbde3efac82022e02a634253579f5c09ad3d5c2f4e5d1cf2b3c805121944fbc2eae75e25926016539f7584152d78ff354471384d79a20697b189a634", 0x78}, {&(0x7f00000003c0)="275b98fd41d74ffaa898730609d15021a313733eecd5a56653f31f262c77ce28620e18703a3d4d525b8a", 0x2a}, {&(0x7f0000000400)="03099039dc58baf6b7adff33bcd9c0b62c9f70695a88", 0x16}], 0x7, &(0x7f00000004c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x4, [@multicast2, @broadcast, @remote, @local, @remote, @empty]}]}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x1}}], 0x60}, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='yeah\x00', 0xfece) sendto$inet6(r3, &(0x7f0000000080), 0xffffffffffffffde, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000005c0)) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDENABIO(r5, 0x4b36) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDENABIO(r7, 0x4b36) ioctl$VIDIOC_G_AUDIO(r7, 0x80345621, &(0x7f00000006c0)) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000580)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x181000, 0x0) 17:02:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/36, 0x24}], 0x4) 17:02:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000121800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x400, 0x4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f00000001c0)={0x8, 0x8}) r7 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="02007fa24e8c194d4beff07e43331302e0452580cce08724441586e2", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000200)=0x7581, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r8, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x3e5b, @ipv4={[], [], @empty}, 0x3}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000080)=0x10) openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) [ 620.022166][ T3813] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000131800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:17 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x2000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000300)={0x3, &(0x7f00000002c0)='g{b'}) 17:02:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000141800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 620.364321][ T4080] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") 17:02:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400001e1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:17 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4000, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, 0x0) 17:02:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000481800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) 17:02:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000080)={0x3, &(0x7f0000000040)=""/33, &(0x7f0000000340)=[{0x6, 0xcc, 0x6a5c, &(0x7f0000000140)=""/204}, {0x200, 0x7f, 0x3f, &(0x7f0000000240)=""/127}, {0x7246, 0x51, 0x1ff, &(0x7f00000002c0)=""/81}]}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0x0, &(0x7f00000000c0)) [ 620.767131][ T4356] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, 0x0) 17:02:17 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4800, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400004c1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/drQ/card#\x00', 0x5, 0x122000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 17:02:17 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) [ 621.055109][ T4573] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, 0x0) 17:02:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000601800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f0000000200)="0e90d3852efe1b7604155bb6b739cb4c8b09f851719852ff7aa863d78c1cb450d3a4bd4312c3371e06b26cc4302e3129ca73c462464ad1b8ad081cc2b2e77584f7a36eaf5203ed53aef57057fe35c717c09d389f0f1913a843a9068ff058e404000000000000003c445b2010510cd53f9b08682f93b48abd850b22c127f80500af3ca0dfb0a00f4149b0bc41220f4a81ead0aa99f0eeb6e65c9618d1f51f2df11f7aa9bb87f02e5a27a452f544939f3939773a9824e167c7") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000018c0)=""/246) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @loopback}) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=""/102, &(0x7f0000000180)=0x66) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) ftruncate(r1, 0x3f) 17:02:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000681800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) 17:02:18 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x4c00, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000280)) 17:02:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400006c1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) [ 621.549037][ T4875] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:02:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000741800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000240)=0x202, 0x4000000000dc) 17:02:18 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) 17:02:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400007a1800210000000000000000001c140000fe000001000000000400130000400100"], 0x24}}, 0x0) 17:02:18 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x100080003, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x5302, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 17:02:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000500)=r2) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f00002de000/0x4000)=nil, 0x4000}) ioctl(r3, 0xffffffffffffffc1, &(0x7f0000000280)="ee73fb822f2f59f36c345ea84b1147b968b273039a78c44dd6390332d7") r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000200)) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) [ 621.927407][ T5015] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 625.490573][ T4790] ------------[ cut here ]------------ [ 625.496081][ T4790] WARNING: CPU: 0 PID: 4790 at include/linux/thread_info.h:150 drm_mode_createblob_ioctl+0x398/0x490 [ 625.506903][ T4790] Kernel panic - not syncing: panic_on_warn set ... [ 625.513575][ T4790] CPU: 0 PID: 4790 Comm: syz-executor.2 Not tainted 5.4.0-rc3-next-20191018 #0 [ 625.522502][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.532550][ T4790] Call Trace: [ 625.535826][ T4790] dump_stack+0x172/0x1f0 [ 625.540137][ T4790] ? drm_mode_createblob_ioctl+0x320/0x490 [ 625.545933][ T4790] panic+0x2e3/0x75c [ 625.549819][ T4790] ? add_taint.cold+0x16/0x16 [ 625.554472][ T4790] ? printk+0xba/0xed [ 625.558465][ T4790] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 625.563908][ T4790] ? __warn.cold+0x14/0x35 [ 625.568418][ T4790] ? drm_mode_createblob_ioctl+0x398/0x490 [ 625.574228][ T4790] __warn.cold+0x2f/0x35 [ 625.578448][ T4790] ? report_bug.cold+0x63/0xb2 [ 625.583200][ T4790] ? drm_mode_createblob_ioctl+0x398/0x490 [ 625.588993][ T4790] report_bug+0x289/0x300 [ 625.593319][ T4790] do_error_trap+0x11b/0x200 [ 625.597905][ T4790] do_invalid_op+0x37/0x50 [ 625.602321][ T4790] ? drm_mode_createblob_ioctl+0x398/0x490 [ 625.608125][ T4790] invalid_op+0x23/0x30 [ 625.612274][ T4790] RIP: 0010:drm_mode_createblob_ioctl+0x398/0x490 [ 625.618677][ T4790] Code: c1 ea 03 80 3c 02 00 0f 85 ed 00 00 00 49 89 5d 00 e8 5c e5 c7 fd 4c 89 f7 e8 e4 75 a6 03 31 c0 e9 75 fd ff ff e8 48 e5 c7 fd <0f> 0b e8 41 e5 c7 fd 4d 85 e4 b8 f2 ff ff ff 0f 84 5b fd ff ff 89 [ 625.638453][ T4790] RSP: 0018:ffff88805f5f7aa8 EFLAGS: 00010246 [ 625.644510][ T4790] RAX: 0000000000040000 RBX: ffff8882192d4000 RCX: ffffc9000a37f000 [ 625.652473][ T4790] RDX: 0000000000040000 RSI: ffffffff83ab6878 RDI: 0000000000000007 [ 625.660421][ T4790] RBP: ffff88805f5f7ae8 R08: ffff88806a284300 R09: ffffed104325a910 [ 625.668370][ T4790] R10: ffffed104325a90f R11: ffff8882192d487f R12: ffffc900167ed000 [ 625.676318][ T4790] R13: ffff88806bdd8000 R14: 00000000b65b1504 R15: ffffc900167ed058 [ 625.684312][ T4790] ? drm_mode_createblob_ioctl+0x398/0x490 [ 625.690112][ T4790] ? drm_mode_createblob_ioctl+0x398/0x490 [ 625.695920][ T4790] drm_ioctl_kernel+0x244/0x300 [ 625.700747][ T4790] ? drm_mode_getblob_ioctl+0x310/0x310 [ 625.706277][ T4790] ? drm_setversion+0x8c0/0x8c0 [ 625.711121][ T4790] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 625.717341][ T4790] ? _copy_from_user+0x12c/0x1a0 [ 625.722271][ T4790] drm_ioctl+0x54e/0xa60 [ 625.726519][ T4790] ? drm_mode_getblob_ioctl+0x310/0x310 [ 625.732059][ T4790] ? drm_ioctl_kernel+0x300/0x300 [ 625.737073][ T4790] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 625.742883][ T4790] ? drm_ioctl_kernel+0x300/0x300 [ 625.747931][ T4790] do_vfs_ioctl+0xdb6/0x13e0 [ 625.752512][ T4790] ? compat_ioctl_preallocate+0x210/0x210 [ 625.758205][ T4790] ? __fget+0x37f/0x550 [ 625.762361][ T4790] ? ksys_dup3+0x3e0/0x3e0 [ 625.766765][ T4790] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 625.772301][ T4790] ? tomoyo_file_ioctl+0x23/0x30 [ 625.777491][ T4790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 625.783718][ T4790] ? security_file_ioctl+0x8d/0xc0 [ 625.788816][ T4790] ksys_ioctl+0xab/0xd0 [ 625.792953][ T4790] __x64_sys_ioctl+0x73/0xb0 [ 625.797521][ T4790] do_syscall_64+0xfa/0x760 [ 625.802016][ T4790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.807894][ T4790] RIP: 0033:0x459a59 [ 625.811777][ T4790] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 625.831370][ T4790] RSP: 002b:00007f3db96b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.839773][ T4790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 625.847726][ T4790] RDX: 0000000020000200 RSI: ffffffffffffffbd RDI: 0000000000000003 [ 625.855677][ T4790] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 625.863646][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3db96b76d4 [ 625.871614][ T4790] R13: 00000000004c0ebc R14: 00000000004d4520 R15: 00000000ffffffff [ 625.881201][ T4790] Kernel Offset: disabled [ 625.885532][ T4790] Rebooting in 86400 seconds..